PT-2025-32990 · Unknown · Cherry-Studio

Published 2025-08-13 · Updated 2025-12-01 · CVE-2025-54382

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cherry Studio versions prior to 1.5.2

Description Cherry Studio is a desktop client that supports multiple LLM providers. A remote code execution (RCE) issue exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The problem stems from the server’s implicit trust in the oauth auth redirection endpoints and failure to properly sanitize the URL. The vulnerable component is the handling of OAuth authentication redirection endpoints.

Recommendations Update to Cherry Studio version 1.5.2 or later.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-54382

GHSA-GJP6-9CVG-8W93

Affected Products

Cherry-Studio

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54382.json · Exploit
• https://github.com/CherryHQ/cherry-studio/security/advisories/GHSA-gjp6-9cvg-8w93 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54382 · Security Note
• https://osv.dev/vulnerability/CVE-2025-54382 · Vendor Advisory
• https://t.me/cveNotify/144454 · Telegram Post
• https://twitter.com/CVEnew/status/1955658249606222295 · Twitter Post
• https://t.me/CVEtracker/29881 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1955664838228647975 · Twitter Post
• https://twitter.com/dailycve/status/1995603115333353621 · Twitter Post