Description
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a sandboxed environment for running Serena."
Published: 2026-09-14
Score: 2.9 Low
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized network exposure
Action: Upgrade
AI Analysis

Impact

A server component of Oraios AI Serena exposed by default through a configuration that causes the MCP server in HTTP mode to listen on all network interfaces, 0.0.0.0. This setting widens the potential attack surface, allowing any node on a network that can reach the host to connect to the MCP server without encountering a local‑interface restriction. The vulnerability does not describe an additional privilege or code‑execution flaw; it simply increases the reachability of the underlying HTTP interface.

Affected Systems

Oraios AI Serena versions prior to 1.0.0 employ the default 0.0.0.0 listen address for the MCP server, making the service accessible from every network interface on the host.

Risk and Exploitability

The base CVSS score of 2.9 flags the issue as low severity. The EPSS score of less than 1% signals a very low likelihood of exploitation, and the vulnerability is not included in the CISA KEV catalog. The additional exposure may allow an attacker to discover service functionality or attempt non‑authenticated interactions, but no evidence of privileged actions or direct code execution is present in the publicly available information.

Generated by OpenCVE AI on September 15, 2026 at 16:43 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Oraios AI Serena to version 1.0.0 or later, which binds the MCP server to a local interface.
  • Reconfigure the MCP server to bind to 127.0.0.1 or another private interface to prevent external exposure.
  • Apply firewall rules to block inbound traffic to the MCP server port until a proper update or configuration change is in place.

Generated by OpenCVE AI on September 15, 2026 at 16:43 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 15 Sep 2026 17:00:00 +0000

Type Values Removed Values Added
Title Serena MCP Server Listens on All Network Interfaces

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Title Serena MCP Server Listens on All Network Interfaces
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 14 Sep 2026 06:00:00 +0000

Type Values Removed Values Added
First Time appeared Oraios-ai
Oraios-ai serena
Vendors & Products Oraios-ai
Oraios-ai serena

Mon, 14 Sep 2026 03:00:00 +0000

Type Values Removed Values Added
Description In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a sandboxed environment for running Serena."
Weaknesses CWE-669
References
Metrics cvssV3_1

{'score': 2.9, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'}

Subscriptions

Oraios-ai Serena
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-09-14T16:32:18.787Z

Reserved: 2026-04-06T00:00:00.000Z

Link: CVE-2026-38924

cve-icon Vulnrichment

Updated: 2026-09-14T16:31:54.766Z

cve-icon NVD

Status : Deferred

Published: 2026-09-14T03:16:36.893

Modified: 2026-09-22T20:00:03.713

Link: CVE-2026-38924

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-15T16:45:06Z

Weaknesses
  • CWE-669

    Incorrect Resource Transfer Between Spheres