25.09.4

joshiayush/inb25.09.4May 8, 2026by andrewsanchez

AI Summary

A security release addressing a vulnerability in the import of untrusted decks (.apkg files) that could potentially read local files.

Key Highlights

  • Security fix for untrusted deck imports reading local files
  • Acknowledgment of the vulnerability reporter
  • Upgrade instructions provided via Tools > Upgrade/Downgrade
  • Other fixes and features deferred to next beta release

New Features

  • Security patch for deck import vulnerability

Full Release Notes

## What's Changed
This is a security release. Please upgrade as soon as possible using `Tools > Upgrade/Downgrade`.

Importing untrusted decks (`.apkg` files) had the ability to read local files. This has now been fixed.

Other fixes and new features will follow in the next beta release.

Many thanks to @Bankde for the excellent report and to @abdnh, @dae, and @fernandolins for the fix! 🙏🏻 

## Installing

- If you're a new user, please grab the latest launcher from https://apps.ankiweb.net
- If you already have the 25.09 launcher, you can use `Tools>Upgrade/Downgrade` inside Anki.
- If you have an older launcher/Anki, please grab the latest launcher first, as the older one may or may not work.