{"metadata": {"vulnerability": "CVE-2026-61546", "count": 11, "kinds": {"milestone": 3, "sighting": 2, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-07-10T16:27:03.094Z", "date_only": false, "value": "2026-07-10T16:27:03.094Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-61546", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T21:40:16.081Z", "date_only": false, "value": "2026-10-28T21:40:16.081Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-61546", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T21:40:16.081Z", "date_only": false, "value": "2026-10-28T21:40:16.081Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-61546", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-28T21:44:10.061Z", "date_only": false, "value": "2026-10-28T21:44:10.061241Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117520718202678841", "record": "CVE-2026-61546", "field": "creation_timestamp", "uuid": "8e6c282c-0bd0-4626-a738-8a835b3f8e4a", "content": "CVE-2026-61546 AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP tools AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard application. Prior to version 0.21.0, `anki_mcp_server/mcp_server.py` globally disables FastMCP DNS-rebinding protection through `TransportSecuritySettings` with `enable_dns_rebinding_protection=False`, including for the default local Streamable HTTP listener. The defaults in `anki_mcp_server/config.py` enable `http_enabled` on `127.0.0.1:3141`, with an empty `http_path` selecting the root endpoint. No bearer token, API key, session secret, strict `Host` allowlist or strict `Origin` allowlist is enforced before `initialize`, `tools/list` and `tools/call` reach MCP dispatch. A victim who visits a malicious web page while Anki and the listener are running can have browser requests rebound to loopback, allowing the attacker to `initialize` MCP, enumerate tools, read the local collection, and perform enabled non-destructive note/deck creation or updates. The attacker needs neither LAN position nor a local process. Available operations depend on enabled tool filters; destructive tools are hidden unless `enabled_destructive_tools` is opted into, limiting deletion-level impact but not the exposed read/write operations. The reported harness confirms real MCP tool dispatch with substituted Anki bridge responses rather than demonstrating destructive changes to a real collection. Disabling protection for tunnels/proxies also disables it for the normal loopback configuration. This issue is fixed in version 0.21.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-61546https://github.com/ankimcp/anki-mcp-server-addon/security/advisories/GHSA-j9xx-59ph-wmr6https://github.com/ankimcp/anki-mcp-server-addon/commit/6dcb6939b0ecc0801f45cf0d241dc946aad1654fhttps://github.com/ankimcp/anki-mcp-server-addon/commit/d5306ff42d68f1e3b82a96878eb059437e820316https://github.com/ankimcp/anki-mcp-server-addon/tree/v0.21.0#ankimcp #anki-mcp-server-addon#CVE_2026_61546#bot", "url": "https://infosec.exchange/users/cve/statuses/117520718202678841"}, {"timestamp": "2026-10-28T22:17:15.590Z", "date_only": false, "value": "2026-10-28T22:17:15.590", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61546", "record": "FKIE_CVE-2026-61546", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-29T11:50:06.042Z", "date_only": false, "value": "2026-10-29T11:50:06.042729Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3myz75xhukm24", "record": "CVE-2026-61546", "field": "creation_timestamp", "uuid": "61771e77-3539-405c-be7d-c4b527a637e1", "content": "CVE-2026-61546 - anki-mcp-server-addon\nThe Anki MCP add\u2011on runs a tiny web server on your computer that does not require any password or other check before allowing certain actions. If you have Anki open, a malicious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ankimcp #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3myz75xhukm24"}, {"timestamp": "2026-10-29T18:24:19.481Z", "date_only": false, "value": "2026-10-29T18:24:19.481141Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-61546", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-29T18:24:19.481Z", "date_only": false, "value": "2026-10-29T18:24:19.481141Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61546", "record": "FKIE_CVE-2026-61546", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-29T18:24:59.680Z", "date_only": false, "value": "2026-10-29T18:24:59.680Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-61546", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-29T18:24:59.680Z", "date_only": false, "value": "2026-10-29T18:24:59.680Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-61546", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-29T19:17:25.297Z", "date_only": false, "value": "2026-10-29T19:17:25.297", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61546", "record": "FKIE_CVE-2026-61546", "field": "lastModified"}], "metrics": {"as_of": "2026-10-31T14:20:12.737Z", "anchors": {"origin": {"timestamp": "2026-10-28T21:40:16.081Z", "date_only": false, "value": "2026-10-28T21:40:16.081Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-61546", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T21:40:16.081Z", "date_only": false, "value": "2026-10-28T21:40:16.081Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-61546", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 232796.656759, "hours": 64.66573798861111, "days": 2.694405749525463, "min_seconds": 232796.656759, "max_seconds": 232796.656759, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T21:40:16.081Z", "date_only": false, "value": "2026-10-28T21:40:16.081Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-61546", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T14:20:12.737Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}