Critical severity9.8NVD Advisory· Published Aug 13, 2025· Updated Jun 17, 2026

CVE-2025-54074

Description

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.2.5 to 1.5.1, Cherry Studio is vulnerable to OS Command Injection during a connection with a malicious MCP server in HTTP Streamable mode. Attackers can setup a malicious MCP server with compatible OAuth authorization server endpoints and trick victims into connecting it, leading to OS command injection in vulnerable clients. This issue has been patched in version 1.5.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cherry AI/Cherry Studio
cpe:2.3:a:cherry-ai:cherry_studio:*:*:*:*:*:*:*:*
Range: >=1.2.5,<1.5.2
CherryHQ/cherry-studiollm-create2 versions
<=1.5.1+ 1 more
- (no CPE)range: <=1.5.1
- (no CPE)range: >= 1.2.5, < 1.5.2
Cherry Studio/Cherry Studiollm-fuzzy
Range: <=1.5.1

Patches

Vulnerability mechanics

References

github.com/CherryHQ/cherry-studio/commit/40f9601379150854826ff3572ef7372fb0acdc38nvdPatch
github.com/CherryHQ/cherry-studio/security/advisories/GHSA-8xr5-732g-84pxnvdExploitVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000