Critical Cherry Studio Flaw CVE-2025-61929 (CVSS 9.7) Allows One-Click RCE via Custom URL Protocol

A critical vulnerability tracked as CVE-2025-61929 (CVSS 9.7) has been disclosed in Cherry Studio, a cross‑platform desktop client that supports multiple large language model providers. The flaw allows attackers to execute arbitrary commands with a single click on a crafted cherrystudio:// link, by abusing base64-encoded configuration data that is not properly validated before execution.

According to the official security advisory, when handling the MCP installation URL, Cherry Studio parses the base64 payload and directly executes the command within it, meaning a malicious link embedded on a webpage or app can compromise a victim’s system. In a proof-of-concept, clicking a specially crafted link launches the Windows calculator, and the advisory notes that more serious risks such as writing a timer schedule could enable persistence or privilege escalation.

The vulnerability affects all Windows, macOS and Linux versions of Cherry Studio that handle cherrystudio:// protocol links, and no patch had been released at the time of reporting.