Beveiligingsadvies

CVE-2026-38924

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-14 00:00:00

Laatst bijgewerkt 2026-09-14 16:32:18

Toegewezen door mitre

CVSS-score 2.9

Status PUBLISHED

Beschrijving

In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a sandboxed environment for running Serena."

← Alle CVE's bekijken Bekijk op cve.org ↗