CherryHQ vulnerabilities
7 published CVEs name CherryHQ among the affected products.
- 7Published CVEs7 of them scored
- 3Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-40501
Cherry Studio RCE via SearchService nodeIntegration Misconfiguration
CherryHQ · cherry-studio
High8.6 - CVE-2026-13534
CherryHQ cherry-studio CherryIN Preload API MemoryService.ts sha256 authorization
CherryHQ · cherry-studio
Low2.3 - CVE-2026-13524
CherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorization
CherryHQ · cherry-studio
Medium6.3 - CVE-2025-61929
Cherry Studio allows one-click on a specific URL to cause a command to execute
CherryHQ · cherry-studio
Critical9.7 - CVE-2025-54382
Cherry Studio RCE Vulnerability Disclosure
CherryHQ · cherry-studio
Critical9.7 - CVE-2025-54074
Cherry Studio is Vulnerable to OS Command Injection during Connection with a Malicious MCP Server
CherryHQ · cherry-studio
High7.7 - CVE-2025-54063
Cherry Studio One-click Remote Code Execution Vulnerability through Custom URL Handling
CherryHQ · cherry-studio
High8.0