73 matches found
CVE-2026-109965
Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.ispathinproject normalizes paths lexically without resolving symlinks, so file tools like readfile and...
CVE-2026-109965 Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root
Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.ispathinproject normalizes paths lexically without resolving symlinks, so file tools like readfile and...
CVE-2026-109965
Serena versions before 2.0.0 are vulnerable to an improper link resolution vulnerability (CWE-59). The root cause is that Project.is_path_in_project() normalizes paths lexically without resolving symlinks. This allows an attacker to commit symlinks inside a repository to access, read, or overwrit...
CVE-2026-109965
Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.ispathinproject normalizes paths lexically without resolving symlinks, so file tools like readfile and...
CVE-2026-109965: Improper Link Resolution Before File Access
Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.ispathinproject normalizes paths lexically without resolving symlinks, so file tools like readfile and...
serena-ssti-poc
Serena Agent SSTI → RCE PoC GHSA-pp25-4cg4-qcr9 Proof-of-co...
CVE-2026-38924
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a...
CVE-2026-38924
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a...
CVE-2026-38924
CVE-2026-38924 affects Oraios AI Serena prior to 1.0.0 , where the MCP server in HTTP mode binds its listen address to 0.0.0.0 (all interfaces) rather than 127.0.0.1. The supplier acknowledged this as a "potential security hazard," though documentation at the time recommended running Serena in a ...
CVE-2026-38924: Incorrect Resource Transfer Between Spheres
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a...
EUVD-2026-77175
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a...
PT-2026-91030
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a...
CVE-2026-38924
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a...
CVE-2026-38924
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a...
Cross-site Request Forgery (CSRF)
Overview serena-agent is an A powerful MCP toolkit for coding, providing semantic retrieval and editing capabilities - the IDE for your agent Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF in the unauthenticated Flask dashboard API, which is exposed on a fixed...
CVE-2026-49471
Serena exposes an unauthenticated Flask API on a fixed port prior to v1.5.2, with no authentication, CSRF protection, or Host header validation. A DNS rebinding attack can reach this API from any browser and write arbitrary content to the agent’s persistent memory store, which the agent may read ...
CVE-2026-49471 Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE
Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. Prior to v1.5.2, Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port, with no authentication, no CSRF protection, and no Host header validation. A D...
CVE-2026-49471: Missing Authentication for Critical Function
Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. Prior to v1.5.2, Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port, with no authentication, no CSRF protection, and no Host header validation. A D...