CVE-2026-49471

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-49471
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-49471.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-49471
Aliases
Published
2026-07-07T20:50:50.545Z
Modified
2026-07-10T03:54:42.016940740Z
Severity
  • 8.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE
Details

Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. Prior to v1.5.2, Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port, with no authentication, no CSRF protection, and no Host header validation. A DNS rebinding attack allows a malicious webpage to reach this API from any browser and write arbitrary content to the agent's persistent memory store, which the agent reads and acts on autonomously. Combined with executeshellcommand using shell=True, this creates a remote code execution chain requiring only that the victim visit a malicious webpage while Serena is running. This issue is fixed in version v1.5.2.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/49xxx/CVE-2026-49471.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-306",
        "CWE-352"
    ]
}
References

Affected packages

Git / github.com/oraios/serena

Affected ranges

Type
GIT
Repo
https://github.com/oraios/serena
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
016ccbe1c095a3eed7967737ac1d4df2754f5d96
Fixed
2ee8f100b25c4d8c8c9b416c3175bb4be413a19c
Database specific 
{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.5.2"
        }
    ]
}

Affected versions

Other
2025-04-01
2025-05-19
2025-05-21
2025-06-20
v0.*
v0.1.0
v0.1.1
v0.1.2
v0.1.3
v0.1.4
v1.*
v1.0.0
v1.1.0
v1.1.1
v1.1.2
v1.2.0
v1.5.0
v1.5.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-49471.json"