CVE-2025-54063: Cherry Studio RCE Vulnerability

CVE-2025-54063 Overview

Cherry Studio is a desktop client that supports multiple LLM providers, enabling users to interact with various large language model services through a unified interface. A critical remote code execution vulnerability exists in Cherry Studio versions 1.4.8 through 1.5.0 that allows attackers to execute arbitrary code on a victim's machine through the application's custom URL handling mechanism.

An attacker can exploit this vulnerability by hosting a malicious website or embedding a specially crafted URL on any website. When a victim clicks the exploit link in their browser, the application's custom URL handler is triggered, leading to remote code execution on the victim's machine without requiring any additional user interaction beyond the initial click.

Critical Impact

One-click remote code execution through malicious URL handling allows attackers to gain full control of victim systems with minimal user interaction.

Affected Products

• Cherry Studio versions 1.4.8 through 1.5.0
• cherry-ai cherry_studio desktop client

Discovery Timeline

• 2025-08-11 - CVE-2025-54063 published to NVD
• 2025-12-02 - Last updated in NVD database

Technical Details for CVE-2025-54063

Vulnerability Analysis

This vulnerability is classified as CWE-94 (Improper Control of Generation of Code - Code Injection). The flaw resides in Cherry Studio's custom URL protocol handler, which fails to properly validate and sanitize incoming URL parameters before processing them. Desktop applications commonly register custom URL schemes (such as cherrystudio://) to enable deep linking and inter-application communication, but improper implementation of these handlers can create severe security risks.

When Cherry Studio processes a specially crafted URL, the application fails to properly validate the input, allowing an attacker to inject malicious code that gets executed in the context of the application. Since desktop applications typically run with the full privileges of the user, successful exploitation grants the attacker the same level of access, potentially including file system access, network connectivity, and the ability to execute arbitrary system commands.

Root Cause

The root cause of this vulnerability is insufficient input validation and sanitization in Cherry Studio's custom URL handler implementation. The application accepts and processes URL parameters without adequately verifying their content or restricting what operations can be triggered through the URL scheme. This allows attackers to craft malicious URLs that, when processed by the handler, result in code execution rather than legitimate application functionality.

Attack Vector

The attack vector for CVE-2025-54063 is network-based and requires user interaction in the form of clicking a malicious link. The attack flow proceeds as follows:

1. The attacker crafts a malicious URL using Cherry Studio's custom URL scheme
2. The attacker hosts this URL on a malicious website or embeds it on a legitimate website through various means (comments, forums, phishing emails)
3. When a victim with Cherry Studio installed clicks the malicious link, the browser recognizes the custom URL scheme and passes it to Cherry Studio
4. Cherry Studio's vulnerable URL handler processes the malicious URL, leading to arbitrary code execution on the victim's system

The exploitation requires no privileges on the attacker's side and only requires the victim to click a link, making it particularly dangerous for social engineering attacks.

Detection Methods for CVE-2025-54063

Indicators of Compromise

• Unexpected process spawning from Cherry Studio application
• Cherry Studio making unusual network connections to unknown external hosts
• Suspicious child processes executing system commands or scripts
• Anomalous file system activity originating from the Cherry Studio process

Detection Strategies

• Monitor process creation events where Cherry Studio is the parent process
• Implement browser security controls to warn users about custom URL scheme invocations
• Use endpoint detection and response (EDR) solutions to identify code injection behaviors
• Analyze network traffic patterns for Cherry Studio communicating with suspicious destinations

Monitoring Recommendations

• Enable detailed application logging for Cherry Studio URL handler events
• Configure SentinelOne to monitor for behavioral indicators associated with URL handler exploitation
• Implement web filtering to block access to known malicious domains distributing exploit URLs
• Review system event logs for unusual Cherry Studio activity patterns

How to Mitigate CVE-2025-54063

Immediate Actions Required

• Upgrade Cherry Studio to version 1.5.1 or later immediately
• If immediate upgrade is not possible, consider temporarily uninstalling Cherry Studio
• Disable or deregister the Cherry Studio custom URL handler until patched
• Educate users about the risks of clicking unknown links, especially those invoking desktop applications

Patch Information

Cherry Studio has addressed this vulnerability in version 1.5.1. The fix is available through the official repository:

• GitHub Security Advisory GHSA-p6vw-w3p8-4g72
• GitHub Pull Request #8218
• GitHub Commit ff72c007c03ff47de21a4d0bf52a1ff1fb35cd89

Organizations should prioritize updating to the patched version as this vulnerability allows one-click remote code execution.

Workarounds

• Remove the Cherry Studio custom URL scheme registration from the operating system
• Configure browser settings to prompt before launching external applications
• Implement network-level URL filtering to block potentially malicious URL scheme invocations
• Use application allowlisting to prevent unauthorized code execution from Cherry Studio

The vulnerability mechanism involves improper handling of custom URL parameters. Technical details are available in the GitHub Security Advisory and the associated pull request. Organizations should review the commit changes to understand the specific code modifications made to address the vulnerability.