Vulnerabilidades do Oraios-ai Serena
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oraios-ai Serena: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:oraios-ai:serena
CVE-2026-38924
Baixa · 2.9
CWE-669 14/09/2026
Incorrect Resource Transfer Between Spheres em Oraios-ai Serena
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a sandboxed environment for running Serena."
CVE-2026-49471
Alta · 8.3
CWE-306 07/07/2026
Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE
Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. Prior to v1.5.2, Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port, with no authentication, no CSRF protection, and no Host header validation. A DNS rebinding attack allows a malicious webpage to reach this API from any browser and write arbitrary content to the agent's persistent memory store, which the agent reads and acts on autonomously. Combined with execute_shell_command using shell=True, this creates a remote code execution chain requiring only that the victim visit a malicious webpage while Serena is running. This issue is fixed in version v1.5.2.