PatchTheCVEcherry-ai vulnerabilities
Recent CVEs affecting cherry-ai products. 4 tracked.
cherry-ai has 4 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-10-10. Highest priority: CVE-2025-54074 (score 65/100).
- CVE-2025-61929 CRITICAL 9.6 UPGRADE Cherry Studio is a desktop client that supports for multiple LLM providers
- CVE-2025-54382 CRITICAL 9.6 UPGRADE Cherry Studio is a desktop client that supports for multiple LLM providers
- CVE-2025-54074 CRITICAL 9.8 UPGRADE Cherry Studio is a desktop client that supports for multiple LLM providers
- CVE-2025-54063 HIGH 8.0 UPGRADE Cherry Studio is a desktop client that supports for multiple LLM providers
FAQ
How do I fix cherry-ai vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cherry-ai being exploited right now?
None of the tracked cherry-ai CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cherry-ai CVE should I patch first?
CVE-2025-54074 currently ranks highest (65/100): Cherry Studio is a desktop client that supports for multiple LLM providers.