CVE-2025-61929
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-61929
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-61929.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-61929
- Aliases
-
- GHSA-hh6w-rmjc-26f6
- Published
- 2025-10-10T19:50:14.036Z
- Modified
- 2025-12-02T20:16:34.502134Z
- Severity
-
- 9.6 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- Cherry Studio allows one-click on a specific URL to cause a command to execute
- Details
-
Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called
cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the filessrc/main/services/ProtocolClient.tsandsrc/main/services/urlschema/mcp-install.ts, when receiving a URL of thecherrystudio://mcptype, thehandleMcpProtocolUrlfunction is called for processing. If an attacker crafts malicious content and posts it on a website or elsewhere (there are many exploitation methods, such as creating a malicious website with a button containing this malicious content), when the user clicks it, since the pop-up window contains normal content, the direct click is considered a scene action, and the malicious command is directly triggered, leading to the user being compromised. As of time of publication, no known patched versions exist. - Database specific
{ "cna_assigner": "GitHub_M", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61929.json", "cwe_ids": [ "CWE-94" ] }- References