https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-61929.htmlhttps://patchthecve.com/cve/CVE-2025-61929.htmlThu, 08 Oct 2026 13:10:00 +0000CRITICAL 9.6: Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called `cherrystudio://`. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files `src/main/https://patchthecve.com/cve/CVE-2025-54382.htmlhttps://patchthecve.com/cve/CVE-2025-54382.htmlWed, 17 Jun 2026 09:39:57 +0000CRITICAL 9.6: Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution (RCE) vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirectiohttps://patchthecve.com/cve/CVE-2025-54074.htmlhttps://patchthecve.com/cve/CVE-2025-54074.htmlWed, 17 Jun 2026 09:39:22 +0000CRITICAL 9.8: Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.2.5 to 1.5.1, Cherry Studio is vulnerable to OS Command Injection during a connection with a malicious MCP server in HTTP Streamable mode. Attackers can setup a malicious MCP server with compatible OAuth authhttps://patchthecve.com/cve/CVE-2025-54063.htmlhttps://patchthecve.com/cve/CVE-2025-54063.htmlWed, 17 Jun 2026 09:39:21 +0000HIGH 8.0: Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one-click remote code execution vulnerability through the custom URL handling. An attacker can exploit this by hosting a malicious website or embedding a specially crafted URL on any