Vulnerabilities

TI-2025-38278 CVE-2025-61929

Cherry Studio allows one-click on a specific URL to cause a command to execute

HIGH 82

Cherry Studio is a desktop client that supports for multiple LLM providers.

CVSS 3.1CRITICAL 9.7 Network No auth User interaction EPSS 0.00471 Published 2025-10-10 No fix listed CWE-94

TI-2025-34191 CVE-2025-54382

HIGH 76

Cherry Studio is a desktop client that supports for multiple LLM providers.

CVSS 3.1CRITICAL 9.7 Network No auth User interaction EPSS 0.08302 Published 2025-08-13 No fix listed CWE-78

TI-2025-33917 CVE-2025-54074

HIGH 69

Cherry Studio is a desktop client that supports for multiple LLM providers.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.02119 Published 2025-08-13 Fixed in 1.5.2 CWE-78

TI-2025-33908 CVE-2025-54063

HIGH 76

Cherry Studio is a desktop client that supports for multiple LLM providers.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00831 Published 2025-08-11 Fixed in 1.5.1 CWE-94