High · published August 13, 2025
⚡ A crafty connection could turn your Cherry Studio client into a command execution playground! This OS Command Injection vulnerability allows attackers to exploit versions 1.2.5 to 1.5.1 when connecting to a malicious MCP server. 🔥 Think of it like a delivery service that unknowingly accepts a package with a hidden explosive instead of a regular order—once it's delivered, chaos can ensue. In this case, connecting to a rogue server can open the floodgates for command execution that could compromise your system. If exploited, an attacker could run arbitrary OS commands on vulnerable clients, potentially leading to unauthorized access and total system control. This is no small risk; it could mean data breaches or severe disruptions to your operations, making this a situation to avoid at all costs!
Think of it like a delivery service that unknowingly accepts a package with a hidden explosive instead of a regular order—once it's delivered, chaos can ensue. In this case, connecting to a rogue server can open the floodgates for command execution that could compromise your system. Cherry Studio versions 1.2.5 to 1.5.1 are vulnerable to OS Command Injection during connections with malicious MCP servers, particularly in HTTP Streamable mode, allowing attackers to execute commands on the host machine.
If exploited, an attacker could run arbitrary OS commands on vulnerable clients, potentially leading to unauthorized access and total system control. This is no small risk; it could mean data breaches or severe disruptions to your operations, making this a situation to avoid at all costs! Upgrade Cherry Studio to version 1.5.2 immediately to patch this vulnerability. Ensure that you review your server connections and only connect to trusted MCP servers to avoid falling victim to malicious setups. You’ve got this! With a quick patch, you can keep your Cherry Studio safe and sound. 🛡️