Vulnerability · Published Oct 13, 2026 · Assigned by VulnCheck
CVE-2026-109965Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root
High 7.1
In plain English
A high-severity security flaw in serena from oraios. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.2%top 87.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.is_path_in_project() normalizes paths lexically without resolving symlinks, so file tools like read_file and create_text_file can read or overwrite files such as SSH keys or cloud credentials.
Affected products (as reported)
Weakness: CWE-59 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
References
- https://github.com/oraios/serena/issues/2144 issue-tracking
- https://github.com/oraios/serena/commit/6f20f9b822d85bb063008e786f808d04619dd54e patch
- serena v2.0.0 Release Notes release-notes
- https://github.com/oraios/serena/blob/v1.7.0/src/serena/project.py technical-description
- https://github.com/oraios/serena product
- VulnCheck Advisory: Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root third-party-advisory