40 matches found
CVE-2026-61546 AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP tools
AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard application. Prior to version 0.21.0, ankimcpserver/mcpserver.py globally disables FastMCP DNS-rebinding protection through TransportSecuritySettings with...
8.8CVSS0.00181EPSS
SaveExploits0References4
20