CVE-2026-49471 is a high-severity vulnerability in oraios serena prior to version 1.5.2. The vulnerability arises from a missing authentication mechanism on a Flask API exposed by the built-in web dashboard on a fixed, predictable port. The API lacks CSRF protection and Host header validation, enabling a DNS rebinding attack to bypass same-origin protections. This allows an attacker-controlled webpage to send arbitrary commands to the API, which writes data to persistent memory that the agent reads and acts upon autonomously. Because the agent executes shell commands with shell=True, this chain results in remote code execution requiring only that the victim visits a malicious webpage while Serena is running. The vulnerability is resolved in version 1.5.2.

An attacker can achieve remote code execution on affected Serena installations by exploiting the unauthenticated API via DNS rebinding attacks. This can lead to full compromise of the system running Serena, including confidentiality, integrity, and availability impacts. The attack requires user interaction (visiting a malicious webpage) but no prior authentication or privileges. This vulnerability has a CVSS 3.1 score of 8.3 (high severity).

Upgrade Serena to version 1.5.2 or later, where this vulnerability is fixed. Until upgrading, users should avoid running Serena in environments exposed to untrusted networks or visiting untrusted webpages while Serena is running. No official patch or temporary fix beyond upgrading is documented. Patch status is not explicitly stated but the fix is included in version 1.5.2.