<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: cherryhq-cherry-studio</title><description>Every new CVE for cherryhq-cherry-studio.</description><link>https://agentprime.io/</link><item><title>CVE-2026-40501: Cherry Studio RCE via SearchService nodeIntegration Misconfiguration</title><link>https://agentprime.io/advisories/CVE-2026-40501/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-40501/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Jul 2026 17:41:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13534: CherryHQ cherry-studio CherryIN Preload API MemoryService.ts sha256 authorization</title><link>https://agentprime.io/advisories/CVE-2026-13534/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13534/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Jun 2026 04:15:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13524: CherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorization</title><link>https://agentprime.io/advisories/CVE-2026-13524/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13524/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Jun 2026 01:45:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-61929: Cherry Studio allows one-click on a specific URL to cause a command to execute</title><link>https://agentprime.io/advisories/CVE-2025-61929/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-61929/</guid><description>CVSS 9.7 (Critical). Critical: CVSS score 9.7: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Oct 2025 19:50:14 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-54382: Cherry Studio RCE Vulnerability Disclosure</title><link>https://agentprime.io/advisories/CVE-2025-54382/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54382/</guid><description>CVSS 9.7 (Critical). Critical: CVSS score 9.7: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Aug 2025 13:31:13 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-54074: Cherry Studio is Vulnerable to OS Command Injection during Connection with a Malicious MCP Server</title><link>https://agentprime.io/advisories/CVE-2025-54074/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54074/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Aug 2025 13:27:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-54063: Cherry Studio One-click Remote Code Execution Vulnerability through Custom URL Handling</title><link>https://agentprime.io/advisories/CVE-2025-54063/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54063/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Aug 2025 17:59:40 GMT</pubDate><category>CVE</category></item></channel></rss>