Executive Summary

This vulnerability exists in Cherry Studio, a desktop client that supports multiple LLM providers. The application registers a custom protocol 'cherrystudio://'. When handling URLs of the type 'cherrystudio://mcp', it parses base64-encoded configuration data and directly executes commands contained within it. An attacker can craft malicious content, such as a specially crafted URL posted on a website. If a user clicks this malicious link, the command embedded in the URL is executed directly, compromising the user. This happens because the pop-up window appears normal, so the click is treated as a legitimate user action.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to severe impacts including full compromise of the user's system. Since the malicious command is executed with user interaction and no privileges are required, an attacker can execute arbitrary commands remotely. The CVSS score of 9.6 indicates high severity with impacts on confidentiality, integrity, and availability, meaning attackers can steal data, alter or destroy data, and disrupt system operations.

Useful 0 Not Useful 0

Mitigation Strategies

Since no patched versions exist as of the publication date, immediate mitigation steps include educating users to avoid clicking on suspicious links or buttons that use the cherrystudio:// protocol, especially those related to mcp installation URLs. Additionally, consider restricting or monitoring the use of the custom protocol handler 'cherrystudio://' on affected systems to prevent execution of malicious commands.

Useful 0 Not Useful 0