Read the docs
TI-2026-28220 Aliases CVE-2026-38924GHSA-gx4x-gc82-v87q

In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is…

Priority MEDIUM 48CWE-669Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a sandboxed environment for running Serena."

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00157 4th percentileScored 2026-11-08
Fix Fixed Serena (Oraios AI): 1.0.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Oraios AISerenabefore 1.0.01.0.0Patch availableCNA
  • Serena VendorOraios AI Affected before 1.0.0 Fixed in 1.0.0 Patch available CNA

Remediation

  • Fix · CNA Serena (Oraios AI) Fixed in 1.0.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-38924
  2. 2026-10-03 Alias added: GHSA-gx4x-gc82-v87q

References

Other 5

  • TI-2026-36626 Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE CVSS 3.1HIGH 8.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences