Oraios Serena vulnerabilities
- oraios serena Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root 8.4 High
- oraios serena In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0.... 2.9 Low
- oraios serena Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE 8.3 High