Serena includes an internal web dashboard built on Flask that is accessible on a fixed port. Until version 1.5.2 this API is exposed without authentication (CWE‑306), CSRF protection (CWE‑352), or host‑header checks. A malicious web page can perform DNS rebinding so that its code appears to be loaded from the local host, allowing it to send requests to the dashboard. The attacker can then write arbitrary data into the agent’s persistent memory, which the agent reads and acts on automatically. When combined with the execute_shell_command endpoint, which runs shell commands with shell=true, the chain enables an attacker to execute arbitrary code on the host. The vulnerability is thus a classic remote code execution flaw triggered by a DNS rebinding attack that only requires a victim to visit a malicious page while Serena is running.

orais Serena software prior to version 1.5.2 is affected. The fix is provided in release v1.5.2; no additional affected versions are listed.

The CVSS score of 8.3 indicates high severity. The EPSS score of < 1% shows a very low likelihood of exploitation in the wild, and the issue is not listed in CISA KEV. The attack vector relies on a user‑side web browser that visits a malicious site and carries out DNS rebinding. Thus, only hosts running Serena with the exposed dashboard and users that stray onto compromised sites are at risk.