CVE-2026-38924: Oraios AI Serena vulnerability
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a sandboxed environment for running Serena."
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Oraios AI Serena deployments before 1.0.0 are affected when the MCP server is run in HTTP mode, because its listen address is 0.0.0.0. This can make the service reachable through network interfaces rather than restricting it to localhost.
What does an attacker need to reach the affected service?
The attacker needs network access to the Serena MCP server's HTTP listener. The supplied data does not identify any further prerequisite, such as credentials or local access.
How can I determine whether my deployment is affected?
Check whether Serena is earlier than version 1.0.0 and whether the MCP server is operating in HTTP mode. An affected HTTP-mode deployment listens on 0.0.0.0.
What can be done if upgrading is not immediately possible?
Restrict network exposure of the MCP server and run Serena in a sandboxed environment. The documentation cited in the report recommended using a sandboxed environment for Serena.