Critical remote code execution in Serena, a popular MCP coding agent
- MCP: 4 events in the last 90 days
- Previous: 2 days earlier · How Cloudflare detects MCP traffic and helps secure it
What happened
Serena, one of the most widely used AI coding agents, ran attacker-supplied code the moment a developer opened a project. GitLab's Threat Research Group found a critical server-side template injection ( GHSA-pp25-4cg4-qcr9 , CVE pending) that executes arbitrary code in the Serena process. Anyone on serena-agent 1.6.1 or earlier should update to 1.7.0 now. A threat actor can exploit this by hiding a malicious .serena…
Summary assembled by rule from the sources below