CVE-2026-109965: Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root
Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.ispathinproject() normalizes paths lexically without resolving symlinks, so file tools like readfile and createtextfile can read or overwrite files such as SSH keys or cloud credentials.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Serenato a version that resolves this vulnerability.Fixed in 2.0.0
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of Serena versions before 2.0.0 are exposed when they work with a repository containing attacker-controlled symlinks. The affected file tools can operate on targets outside the intended project root.
What does exploitation require?
An attacker needs to get symlinks committed inside a repository that a user opens or otherwise processes with Serena. Exploitation also requires user interaction, as reflected by the UI:R vector.
What can an attacker do through the vulnerable file tools?
The affected read_file and create_text_file tools may follow repository symlinks to read or overwrite files outside the project root. Examples given include SSH keys and cloud credentials.
What should teams do if they cannot upgrade immediately?
Do not use affected Serena versions with repositories that may contain untrusted or attacker-controlled symlinks. Review repository contents for symlinks before using the affected file tools.
How can I determine whether my environment is affected?
Check whether Serena is earlier than version 2.0.0 and whether repositories it processes contain symlinks. In an affected version, a symlink located under the project root may resolve to a file outside that root.