Oraios Ai Serena
2 CVEs affecting Oraios Ai Serena. Latest disclosed: 2026-09-14. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-49471 | High | 8.3 | 2026-07-07 | Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. Prior to v1.5.2, Serena's built-in web dashboard exposes… |
CVE-2026-38924 | Low | 2.9 | 2026-09-14 | In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential secur… |