{"data":{"id":"a3604556-f8a0-4d2c-8cfc-4275da84277f","title":"GHSA-37h2-6p4f-mp3q: Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE","summary":"Serena's built-in web dashboard exposes an unauthenticated Flask API on fixed TCP port 24282 (hardcoded as 0x5EDA in constants.py), with no authentication, no CSRF protection and no Host header validation. A DNS rebinding attack lets a malicious webpage write arbitrary content to the agent's persistent memory, which the agent later reads and acts on, reaching execute_shell_command, enabled by default through shell=True, for remote code execution. The source states that any user running Serena with the default configuration is affected, and the chain requires only that the victim visit a malicious webpage while Serena is running.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-37h2-6p4f-mp3q","publishedAt":"2026-07-08T21:12:08.000Z","cveId":"CVE-2026-49471","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":["serena-agent@< 1.5.2 (fixed: 1.5.2)"],"affectedPackageNames":["serena-agent"],"affectedPackageRefs":["pypi:serena-agent"],"affectedVendors":[],"affectedVendorsRaw":["Serena"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00373,"epssCheckedAt":"2026-10-14T12:12:43.169Z","kevDateAdded":null,"advisoryAliases":["GHSA-37h2-6p4f-mp3q"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-07-08T21:12:08.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"]}}