CherryHQ vulnerabilities
We track 5 vulnerabilities in CherryHQ products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 15, 2026.
Latest CherryHQ vulnerabilities
- 8.8 High severity
cherry-studio: Inclusion of Functionality from Untrusted Control Sphere
Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a remote code execution vulnerability in SearchService that allows remote attackers to execute arbitrary code by delivering malicious JavaScript through controlled search provider co
- 9.6 Critical severity
cherry-studio: Improper Control of Generation of Code
Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called `cherrystudio://`. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the co
- 8.8 High severity
cherry-studio: Improper Neutralization of Special Elements used in an OS Command
Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution (RCE) vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s imp
- 9.8 Critical severity
cherry-studio: Improper Neutralization of Special Elements used in an OS Command
Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.2.5 to 1.5.1, Cherry Studio is vulnerable to OS Command Injection during a connection with a malicious MCP server in HTTP Streamable mode. Attackers can setup a malicio
- 9.6 Critical severity
cherry-studio: Improper Control of Generation of Code
Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one-click remote code execution vulnerability through the custom URL handling. An attacker can exploit this by hosting a malicious website or e