CVE-2026-109965 Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root

Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.ispathinproject normalizes paths lexically without resolving symlinks, so file tools like readfile and...

CVE-2026-109965 Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root

Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.ispathinproject normalizes paths lexically without resolving symlinks, so file tools like readfile and...