All vulnerabilities

CVE-2026-61546 · GHSA-j9xx-59ph-wmr6

AnkiMCP: DNS rebinding reaches unauthenticated local HTTP tools

highCWE-346CWE-350

Vendor

ankimcp

Package

ai.ankimcp/anki-mcp-server-addon other

Affected

<= 0.20.0

Disclosed

2026-06-18

Credit

Avishai Gonen

dns-rebindingmcp

Published advisory