Vulnerabilities in CherryHQ

6 results

CVE-2025-54382CRITICALCherry Studio RCE Vulnerability DisclosureEPSS 5.4%CVE-2025-54074HIGHCherry Studio is Vulnerable to OS Command Injection during Connection with a Malicious MCP ServerEPSS 2.1%CVE-2025-54063HIGHCherry Studio One-click Remote Code Execution Vulnerability through Custom URL HandlingEPSS 0.7%CVE-2025-61929CRITICALCherry Studio allows one-click on a specific URL to cause a command to executeEPSS 0.4%CVE-2026-13524MEDIUMCherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorizationEPSS 0.3%CVE-2026-13534LOWCherryHQ cherry-studio CherryIN Preload API MemoryService.ts sha256 authorizationEPSS 0.2%