MAL-2025-16900 Malicious code in cherry-ad8-project (npm)

The package cherry-ad8-project was found to contain malicious code...

MAL-2025-31224 Malicious code in quebec-cherry-orange-kjngy (npm)

The package quebec-cherry-orange-kjngy was found to contain malicious code...

MAL-2025-39180 Malicious code in whiskey-cherry-india-mdlfo (npm)

The package whiskey-cherry-india-mdlfo was found to contain malicious code...

MAL-2025-20406 Malicious code in ferry-cherry-83vm (npm)

The package ferry-cherry-83vm was found to contain malicious code...

MAL-2025-25115 Malicious code in lemon-mango-cherry-ldblp (npm)

The package lemon-mango-cherry-ldblp was found to contain malicious code...

MAL-2025-25128 Malicious code in lemon-tango-cherry-pnsyi (npm)

The package lemon-tango-cherry-pnsyi was found to contain malicious code...

MAL-2025-16932 Malicious code in cherry-ocp-project (npm)

The package cherry-ocp-project was found to contain malicious code...

MAL-2025-16918 Malicious code in cherry-galaxy-big896-project (npm)

The package cherry-galaxy-big896-project was found to contain malicious code...

MAL-2025-16960 Malicious code in cherry-vista-vuo979-project (npm)

The package cherry-vista-vuo979-project was found to contain malicious code...

MAL-2025-20858 Malicious code in foxtrot-cherry-gnwl (npm)

The package foxtrot-cherry-gnwl was found to contain malicious code...

MAL-2025-16961 Malicious code in cherry-void-4nca (npm)

The package cherry-void-4nca was found to contain malicious code...

MAL-2025-16948 Malicious code in cherry-sierra-mfwc (npm)

The package cherry-sierra-mfwc was found to contain malicious code...

MAL-2025-16965 Malicious code in cherry-xigua-kiwi-fgrcc (npm)

The package cherry-xigua-kiwi-fgrcc was found to contain malicious code...

CVE-2025-54063

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one-click remote code execution vulnerability through the custom URL handling. An attacker can exploit this by hosting a malicious website or embedding a specially crafted URL on a...

CVE-2025-54382

Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution RCE vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirecti...

CVE-2025-54074

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.2.5 to 1.5.1, Cherry Studio is vulnerable to OS Command Injection during a connection with a malicious MCP server in HTTP Streamable mode. Attackers can setup a malicious MCP server with compatible OAuth...

CVE-2025-54382 Cherry Studio RCE Vulnerability Disclosure

Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution RCE vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirecti...

CVE-2025-54382

Cherry Studio (desktop client) version 1.5.1 is affected by an RCE vulnerability when connecting to streamableHttp MCP servers due to the server’s implicit trust in OAuth redirection URLs and improper URL sanitization. The issue is mitigated by upgrading to version 1.5.2. Exploitation status is n...

CVE-2025-54382 Cherry Studio RCE Vulnerability Disclosure

Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution RCE vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirecti...

CVE-2025-54382 Cherry Studio RCE Vulnerability Disclosure

Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution RCE vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirecti...