CVE-2026-38924
Received Received - Intake

Oraios AI Serena MCP Server Listen Address Misconfiguration

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: MITRE

Description
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a sandboxed environment for running Serena."

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-38924
EUVD
EUVD-2026-77175

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
oraios serena to 1.0.0 (exc)
oraios serena 1.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-669 The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-38924 is an unauthenticated remote code execution (RCE) vulnerability in the Serena MCP Server affecting versions 0.1.4 and earlier. The server binds to 0.0.0.0:8000 by default with no authentication, exposing tools like execute_shell_command over the network. An attacker can send four HTTP requests to execute arbitrary commands with the same privileges as the Serena process user.

Detection Guidance

Check if the Serena MCP server is listening on 0.0.0.0 by running netstat -tuln | grep 0.0.0.0 or ss -tuln | grep 0.0.0.0. If it is, the system may be vulnerable. Verify the version of Serena installed and compare it against patched versions.

Impact Analysis

This vulnerability allows attackers to execute arbitrary commands on the affected system with the same privileges as the Serena process user. Potential impacts include credential theft, filesystem access, persistent access, and lateral movement within a network.

Mitigation Strategies

Update Serena to version 1.0.0 or later. If updating is not possible, modify the server configuration to bind to 127.0.0.1 instead of 0.0.0.0. Avoid exposing the server to untrusted networks and use sandboxed environments like Docker for additional security.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-38924. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart