Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.3
CVE-2026-49471: Serena dashboard lets attackers run code remotely
CVE-2026-49471 · published 4 months ago
Summary
The Serena web dashboard runs a Flask API on a fixed, predictable port with no login or checks. An attacker can trick a user’s browser into sending commands that write to Serena’s memory and then execute arbitrary commands on the host. Upgrade to Serena version 1.5.2 or later to close the gap.
What to do
- Update oraios ai serena-agent to version 1.5.2.
- Update oraios-ai serena to version 1.5.2 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | oraios | serena | < 1.5.2 |
| pip | oraios ai | serena-agent |
< 1.5.2 Fix: upgrade to 1.5.2
|
| – | oraios-ai | serena |
< 1.5.2 cpe:2.3:a:oraios-ai:serena:*:*:*:*:*:*:*:* |
Original advisory text
Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE
Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. Prior to v1.5.2, Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port, with no authentication, no CSRF protection, and no Host header validation. A DNS rebinding attack allows a malicious webpage to reach this API from any browser and write arbitrary content to the agent's persistent memory store, which the agent reads and acts on autonomously. Combined with execute_shell_command using shell=True, this creates a remote code execution chain requiring only that the victim visit a malicious webpage while Serena is running. This issue is fixed in version v1.5.2.
References
- https://github.com/advisories/GHSA-37h2-6p4f-mp3q
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/49xxx/CVE-2026-49471... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-49471 Vendor Advisory
- https://github.com/oraios/serena/releases/tag/v1.5.2 URL
- https://github.com/oraios/serena/security/advisories/GHSA-37h2-6p4f-mp3q Vendor Advisory
- https://github.com/oraios/serena/commit/016ccbe1c095a3eed7967737ac1d4df2754f5d96 Patch
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-306Missing Authentication for Critical Function
CWE-352Cross-Site Request Forgery (CSRF)
Timeline
Published7 Jul 2026
Updated4 Nov 2026
First seen7 Jul 2026
Track software like this
Free during beta