Starstruk Logo MarkStarstruk

25.09.4

achtungsoftware/alarik25.09.4May 8, 2026by andrewsanchez

AI Summary

This is a critical security release addressing a vulnerability where importing untrusted decks (`.apkg` files) could read local files on the system.

Key Highlights

  • Fixed local file read vulnerability in untrusted deck imports.
  • Thanks to @Bankde for the report and @abdnh, @dae, and @fernandolins for the fix.
  • Upgrade instructions provided via Tools > Upgrade/Downgrade.

Full Release Notes

## What's Changed
This is a security release. Please upgrade as soon as possible using `Tools > Upgrade/Downgrade`.

Importing untrusted decks (`.apkg` files) had the ability to read local files. This has now been fixed.

Other fixes and new features will follow in the next beta release.

Many thanks to @Bankde for the excellent report and to @abdnh, @dae, and @fernandolins for the fix! 🙏🏻 

## Installing

- If you're a new user, please grab the latest launcher from https://apps.ankiweb.net
- If you already have the 25.09 launcher, you can use `Tools>Upgrade/Downgrade` inside Anki.
- If you have an older launcher/Anki, please grab the latest launcher first, as the older one may or may not work.