Skip to content
Noroxi

cherry-ai records

4 published records for vendor cherry-ai.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
75%
Median publish → KEV
No record has entered KEV

Records by year

  1. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2025-54063
    38Monitor

    Cherry Studio One-click Remote Code Execution Vulnerability through Custom URL Handling

    CriticalCVSS 9.6No exploitEPSS 0%

    cherry-ai · cherry studioAug 11, 2025

  • CVE-2025-61929
    38Monitor

    Cherry Studio allows one-click on a specific URL to cause a command to execute

    CriticalCVSS 9.6No exploitEPSS 0%

    cherry-ai · cherry studioOct 10, 2025

  • CVE-2025-54382
    37Monitor

    Cherry Studio RCE Vulnerability Disclosure

    HighCVSS 8.8No exploitEPSS 8%

    cherry-ai · cherry studioAug 13, 2025

  • CVE-2025-54074
    31Monitor

    Cherry Studio is Vulnerable to OS Command Injection during Connection with a Malicious MCP Server

    HighCVSS 7.7No exploitEPSS 2%

    cherry-ai · cherry studioAug 13, 2025