Vulnerabilities in CherryHQ

4 results

CVE-2025-54382CRITICALCherry Studio RCE Vulnerability DisclosureEPSS 5.4%CVE-2025-54074HIGHCherry Studio is Vulnerable to OS Command Injection during Connection with a Malicious MCP ServerEPSS 2.1%CVE-2025-54063HIGHCherry Studio One-click Remote Code Execution Vulnerability through Custom URL HandlingEPSS 0.7%CVE-2025-61929CRITICALCherry Studio allows one-click on a specific URL to cause a command to executeEPSS 0.4%