प्लेटफ़ॉर्म
windows
घटक
cherry-studio
में ठीक किया गया
1.4.9
CVE-2025-54063 describes a Remote Code Execution (RCE) vulnerability discovered in Cherry Studio, a desktop client for LLM providers. This vulnerability allows an attacker to execute arbitrary code on a victim's machine through a specially crafted URL. The issue affects versions 1.4.8 through 1.5.0 and has been resolved in version 1.5.1.
The impact of this vulnerability is significant, as it allows for complete remote control of the affected system. An attacker can exploit this by hosting a malicious website or embedding a crafted URL on any website. When a victim clicks this link in their browser, Cherry Studio's custom URL handler is triggered, leading to the execution of arbitrary code. This could result in data theft, malware installation, or complete system compromise. The attacker essentially gains the same privileges as the user running the Cherry Studio application.
This vulnerability was publicly disclosed on 2025-08-11. No public proof-of-concept (PoC) code has been released at the time of writing, but the ease of exploitation (simply clicking a link) suggests a medium probability of exploitation. It is not currently listed on CISA KEV.
Users who rely on Cherry Studio for interacting with LLMs, particularly those who frequently click links from external sources or are part of organizations with less stringent web browsing security policies, are at increased risk. Individuals using older, unpatched versions of Cherry Studio are especially vulnerable.
• windows / supply-chain:
Get-Process | Where-Object {$_.ProcessName -eq "CherryStudio"}• windows / supply-chain:
Get-ScheduledTask | Where-Object {$_.TaskName -like "*CherryStudio*"}• windows / supply-chain:
Get-WinEvent -LogName Application -FilterXPath "*[System[Provider[@Name='Microsoft-Windows-SysInternals-Autoruns']]]" | Select-String -Pattern "CherryStudio"disclosure
एक्सप्लॉइट स्थिति
EPSS
0.37% (59% शतमक)
CISA SSVC
CVSS वेक्टर
The primary mitigation for CVE-2025-54063 is to immediately upgrade Cherry Studio to version 1.5.1 or later. If upgrading is not immediately feasible, users should exercise extreme caution when clicking links from untrusted sources. Consider implementing a web proxy or firewall rule to block access to suspicious URLs. While a direct detection signature is challenging, monitor for unusual process execution originating from the Cherry Studio application.
Actualice Cherry Studio a la versión 1.5.1 o posterior. Esta versión contiene una corrección para la vulnerabilidad de ejecución remota de código. Descargue la última versión desde el sitio web oficial de CherryHQ o a través del mecanismo de actualización dentro de la aplicación.
भेद्यता विश्लेषण और गंभीर अलर्ट सीधे आपके ईमेल में।
CVE-2025-54063 is a Remote Code Execution vulnerability in Cherry Studio versions 1.4.8 to 1.5.0, allowing attackers to execute code via a malicious URL.
You are affected if you are using Cherry Studio versions 1.4.8 through 1.5.0. Upgrade to version 1.5.1 to resolve the vulnerability.
Upgrade Cherry Studio to version 1.5.1 or later. Exercise caution when clicking links from untrusted sources.
While no public exploits are currently known, the ease of exploitation suggests a potential for active exploitation.
Refer to the Cherry Studio official website or their security advisory page for the latest information and updates regarding CVE-2025-54063.
अपनी डिपेंडेंसी फ़ाइल अपलोड करें और तुरंत जानें कि यह CVE और अन्य आपको प्रभावित करती हैं या नहीं।