Cherryhq Cherry-studio vulnerabilities

• cherryhq cherry-studio Cherry Studio RCE via SearchService nodeIntegration Misconfiguration CVE-2026-40501 8.6 HighJuly 15, 2026
• cherryhq cherry-studio CherryHQ cherry-studio CherryIN Preload API MemoryService.ts sha256 authorization CVE-2026-13534 2.3 LowJune 29, 2026
• cherryhq cherry-studio CherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorization CVE-2026-13524 6.3 MediumJune 29, 2026
• cherry-ai cherry studio, cherryhq cherry-studio +1 more Cherry Studio allows one-click on a specific URL to cause a command to execute CVE-2025-61929 9.7 CriticalOctober 10, 2025
• cherry-ai cherry studio, cherryhq cherry-studio +1 more Cherry Studio RCE Vulnerability Disclosure CVE-2025-54382 9.7 CriticalAugust 13, 2025
• cherry-ai cherry studio, cherryhq cherry-studio +1 more Cherry Studio is Vulnerable to OS Command Injection during Connection with a Malicious MCP Server CVE-2025-54074 7.7 HighAugust 13, 2025
• cherry-ai cherry studio, cherryhq cherry-studio +1 more Cherry Studio One-click Remote Code Execution Vulnerability through Custom URL Handling CVE-2025-54063 8.0 HighAugust 11, 2025