CherryHQ cherry-studio

• CVE-2026-40501 High 8.8 Cherry Studio RCE via SearchService nodeIntegration Misconfiguration 0.8%
• CVE-2026-13534 Medium 5.0 CherryHQ cherry-studio CherryIN Preload API MemoryService.ts sha256 authorization 0.3%
• CVE-2026-13524 Medium 5.6 CherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorization 0.4%
• CVE-2025-61929 Critical 9.7 Cherry Studio allows one-click on a specific URL to cause a command to execute 0.5%
• CVE-2025-54382 Critical 9.7 Cherry Studio RCE Vulnerability Disclosure 8.3%
• CVE-2025-54074 High 7.7 Cherry Studio is Vulnerable to OS Command Injection during Connection with a Malicious MCP Server 2.1%
• CVE-2025-54063 High 8.0 Cherry Studio One-click Remote Code Execution Vulnerability through Custom URL Handling 0.8%