Read the docs
TI-2025-33908 Aliases CVE-2025-54063

Cherry Studio One-click Remote Code Execution Vulnerability through Custom URL Handling

Priority HIGH 76CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-94.

Summary

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one-click remote code execution vulnerability through the custom URL handling. An attacker can exploit this by hosting a malicious website or embedding a specially crafted URL on any website. If a victim clicks the exploit link in their browser, the app’s custom URL handler is triggered, leading to remote code execution on the victim’s machine. This issue has been patched in version 1.5.1.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00831 57th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed cherry-studio (CherryHQ): 1.5.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CherryHQcherry-studio1.4.8 to before 1.5.11.5.1Patch availableCNA
  • cherry-studio VendorCherryHQ Affected 1.4.8 to before 1.5.1 Fixed in 1.5.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:cherry-ai:cherry_studio:*:*:*:*:*:*:*:*1.4.8 to before 1.5.1VulnerableCherryHQ
  • cpe:2.3:a:cherry-ai:cherry_studio:*:*:*:*:*:*:*:* Versions 1.4.8 to before 1.5.1 Vulnerable ·CherryHQ

Remediation

  • Fix · CNA cherry-studio (CherryHQ) Fixed in 1.5.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-54063

References

Exploit 1

Patch 2

  • TI-2025-38278 Cherry Studio allows one-click on a specific URL to cause a command to execute CVSS 3.1CRITICAL 9.7
  • TI-2025-34191 Cherry Studio RCE Vulnerability Disclosure CVSS 3.1CRITICAL 9.7
  • TI-2025-33917 Cherry Studio is Vulnerable to OS Command Injection during Connection with a Malicious MCP Server CVSS 4.0HIGH 7.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences