CVE-2025-61929
BaseFortify
Publication date: 2025-10-10
Last updated on: 2025-12-04
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| cherry-ai | cherry_studio | to 1.6.4 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-94 | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in Cherry Studio, a desktop client that supports multiple LLM providers. The application registers a custom protocol 'cherrystudio://'. When handling URLs of the type 'cherrystudio://mcp', it parses base64-encoded configuration data and directly executes commands contained within it. An attacker can craft malicious content, such as a specially crafted URL posted on a website. If a user clicks this malicious link, the command embedded in the URL is executed directly, compromising the user. This happens because the pop-up window appears normal, so the click is treated as a legitimate user action.
How can this vulnerability impact me? :
This vulnerability can lead to severe impacts including full compromise of the user's system. Since the malicious command is executed with user interaction and no privileges are required, an attacker can execute arbitrary commands remotely. The CVSS score of 9.6 indicates high severity with impacts on confidentiality, integrity, and availability, meaning attackers can steal data, alter or destroy data, and disrupt system operations.
What immediate steps should I take to mitigate this vulnerability?
Since no patched versions exist as of the publication date, immediate mitigation steps include educating users to avoid clicking on suspicious links or buttons that use the cherrystudio:// protocol, especially those related to mcp installation URLs. Additionally, consider restricting or monitoring the use of the custom protocol handler 'cherrystudio://' on affected systems to prevent execution of malicious commands.