Vulnerability · Published Aug 13, 2025 · Assigned by GitHub_M

CVE-2025-54382Cherry Studio RCE Vulnerability Disclosure

Critical 9.7

In plain English

A critical-severity OS command injection in cherry-studio from CherryHQ. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 8.3% (higher than 95% of all known vulnerabilities).

Severity (CVSS 3.1)9.7Critical

Exploit odds (30 days)8.3%top 5.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution (RCE) vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirection endpoints and failure to properly sanitize the URL. This issue has been patched in version 1.5.2.

Affected products (as reported)

Vendor	Product	Versions
CherryHQ	cherry-studio	= 1.5.1

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References

https://github.com/CherryHQ/cherry-studio/security/advisories/GHSA-gjp6-9cvg-8w93 x_refsource_CONFIRM