Ankitects Anki versions prior to 24.06 contain an arbitrary script execution vulnerability in the MPV functionality. A specially crafted flashcard can trigger arbitrary code execution, allowing an attacker to execute malicious scripts. This vulnerability is critical and has been fixed in version 24.06.