CVE-2026-109965: Improper Link Resolution Before File Access ('Link Following') in oraios serena

The vulnerability in oraios serena (prior to version 2.0.0) arises from improper handling of symbolic links during path normalization in the Project.is_path_in_project() function. This function performs lexical normalization of paths but does not resolve symlinks, which can be exploited by attackers who commit symlinks inside a repository. Consequently, file manipulation functions such as read_file and create_text_file can access or overwrite files outside the intended project directory, including sensitive files like SSH keys and cloud credentials.

Attackers can leverage this vulnerability to read or overwrite sensitive files outside the project root directory, potentially leading to unauthorized disclosure of credentials or other critical data. This can compromise system security and confidentiality of sensitive information stored on the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid committing symlinks inside repositories and restrict repository access to trusted users only to reduce risk.