CVE-2025-54063 - CVE House
Back to Database
Status published High CVE-2025-54063

Cherry Studio One-click Remote Code Execution Vulnerability through Custom URL Handling

Vulnerability Description

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one-click remote code execution vulnerability through the custom URL handling. An attacker can exploit this by hosting a malicious website or embedding a specially crafted URL on any website. If a victim clicks the exploit link in their browser, the app’s custom URL handler is triggered, leading to remote code execution on the victim’s machine. This issue has been patched in version 1.5.1.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54063

Credits & Attribution

No credits recorded in the NVD database.

References

More from CherryHQ

View All →
CVE-2025-61929
Cherry Studio allows one-click on a specific URL to cause a command to execute
Critical 9.7
CVE-2025-54382
Cherry Studio RCE Vulnerability Disclosure
Critical 9.7
CVE-2025-54074
Cherry Studio is Vulnerable to OS Command Injection during Connection with a Malicious MCP Server
High 7.7

Affected Vendor

Affected Software

cherry-studio
Vulnerable Versions:
>= 1.4.8, < 1.5.1

Timeline

Official Publish: August 11th, 2025
Last Modified: August 11th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-94

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1505.003 Web Shell
Persistence
T1105 Ingress Tool Transfer
Command and Control
T1565.002 Stored Data Manipulation
Impact