Platform
windows
Component
cherry-studio
Fixed in
1.4.9
CVE-2025-54063 describes a Remote Code Execution (RCE) vulnerability discovered in Cherry Studio, a desktop client for LLM providers. This vulnerability allows an attacker to execute arbitrary code on a victim's machine through a specially crafted URL. The issue affects versions 1.4.8 through 1.5.0 and has been resolved in version 1.5.1.
The impact of this vulnerability is significant, as it allows for complete remote control of the affected system. An attacker can exploit this by hosting a malicious website or embedding a crafted URL on any website. When a victim clicks this link in their browser, Cherry Studio's custom URL handler is triggered, leading to the execution of arbitrary code. This could result in data theft, malware installation, or complete system compromise. The attacker essentially gains the same privileges as the user running the Cherry Studio application.
This vulnerability was publicly disclosed on 2025-08-11. No public proof-of-concept (PoC) code has been released at the time of writing, but the ease of exploitation (simply clicking a link) suggests a medium probability of exploitation. It is not currently listed on CISA KEV.
Exploit Status
EPSS
0.37% (59% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2025-54063 is to immediately upgrade Cherry Studio to version 1.5.1 or later. If upgrading is not immediately feasible, users should exercise extreme caution when clicking links from untrusted sources. Consider implementing a web proxy or firewall rule to block access to suspicious URLs. While a direct detection signature is challenging, monitor for unusual process execution originating from the Cherry Studio application.
Actualice Cherry Studio a la versión 1.5.1 o posterior. Esta versión contiene una corrección para la vulnerabilidad de ejecución remota de código. Descargue la última versión desde el sitio web oficial de CherryHQ o a través del mecanismo de actualización dentro de la aplicación.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2025-54063 is a Remote Code Execution vulnerability in Cherry Studio versions 1.4.8 to 1.5.0, allowing attackers to execute code via a malicious URL.
You are affected if you are using Cherry Studio versions 1.4.8 through 1.5.0. Upgrade to version 1.5.1 to resolve the vulnerability.
Upgrade Cherry Studio to version 1.5.1 or later. Exercise caution when clicking links from untrusted sources.
While no public exploits are currently known, the ease of exploitation suggests a potential for active exploitation.
Refer to the Cherry Studio official website or their security advisory page for the latest information and updates regarding CVE-2025-54063.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.