cherry studio
Security Risk Profile
81
/100
criticalSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 11, 2025 to present
4
Total CVEs
4
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
9.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
81/100
critical
Severity Distribution
Critical
4High
0Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Code Injection
2
2
OS Command Injection
2
3
Command Injection
1
Most Affected Products
1. Cherry-ai Cherry Studio4
2. Cherry Studio Cherry Studio3
3. Cherry Studio Studio1
Recent Vulnerabilities
See more →CVE-2025-61929
CVSS 9.7critical
Cherry Studio allows one-click on a specific URL to cause a command to execute
10/10/2025🔧 No Patch
CVE-2025-54382
CVSS 9.7critical
Cherry Studio RCE Vulnerability Disclosure
8/13/2025🔧 No Patch
CVE-2025-54074
CVSS 9.8critical
Cherry Studio is Vulnerable to OS Command Injection during Connection with a Malicious MCP Server
8/13/2025
CVE-2025-54063
CVSS 9.6critical
Cherry Studio One-click Remote Code Execution Vulnerability through Custom URL Handling
8/11/2025
Monitor cherry studio in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.