PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Critical remote code execution in Serena, a popular MCP coding agent

about.gitlab.com | vulnerability | Critical | #rce | #supply-chain | #gitlab | #mcp | #template-injection | #serena | #ai-coding-agent
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

GitLab found a critical template injection in Serena, an MCP coding agent: a malicious project.yml executes attacker code when a developer opens the repo, bypassing its trust controls; fixed in 1.7.0.

Why it matters

This vulnerability coverage helps defenders validate exposure and prioritize remediation.
Vendor
GitLab
Product
Serena MCP coding agent
Published
Collected

Related coverage

vulnerability · about.gitlab.com
Pillow CVE-2026-112900: How to find and fix it with GitLab
Upgrade to Pillow 13.0.0, then use dependency scanning, code search, and GitLab Duo Agent Platform to patch every affected Python project in your groups.
Critical · vulnerability · aikido.dev
Node2Shell Evolves to HTTP2Shell: Google Brotli Flaw (CVE-2026-111497) Affects HTTP Ecosystem
Brotli is ubiquitous across the modern HTTP ecosystem for web asset compression. Because the flaw allows unauthenticated remote code execution in both directions, any service or client automatically decompressing untrusted Brotli payloads is at critical risk until patched.
blog · about.gitlab.com
Connect your agents to your software lifecycle with the GitLab MCP server
Run GitLab workflows from your favorite AI application in fewer calls and with leaner context. The GitLab MCP server is now generally available.
Critical · advisory · github.com
GHSA-9v8h-qqgm-4m35: Out-of-Bounds Write in Brotli Decoder ("Node2Shell") Affects Python & Node.js Ecosystems (CVE-2026-111497)
Because Brotli is ubiquitous across web servers, browsers, runtimes, and package registries, any application decompressing untrusted user-supplied payload with affected decoders is vulnerable to memory corruption or RCE.
vulnerability · blog.quarkslab.com
MyReport Updater: From gRPC to SYSTEM
MyReport is a report generation software often used as a component of web-based applications. We describe a privilege escalation and remote code execution vulnerabilities in MyReport Updater 2.1.1 through its update configuration and gRPC service.
vulnerability · bishopfox.com
SecureAuth Version 9.3
A Bishop Fox advisory on CVE-2020-9437: AngularJS client-side template injection in SecureAuth 9.3 allows XSS payloads via usernames or emails during authentication, fixed in 9.3.0-17.
Back