---
id: 6559
title: "Critical remote code execution in Serena, a popular MCP coding agent"
severity: critical
vendor: "GitLab"
product: "Serena MCP coding agent"
source_domain: about.gitlab.com
source_url: "https://about.gitlab.com/blog/critical-rce-in-serena/"
published_at: "2026-08-17T00:00:00Z"
tags: ["rce", "supply-chain", "gitlab", "mcp", "template-injection", "serena", "ai-coding-agent"]
phying_url: "https://phying.com/item/6559"
lang: en
---

# Critical remote code execution in Serena, a popular MCP coding agent

## Summary

GitLab found a critical template injection in Serena, an MCP coding agent: a malicious project.yml executes attacker code when a developer opens the repo, bypassing its trust controls; fixed in 1.7.0.

## Why it matters

This vulnerability coverage helps defenders validate exposure and prioritize remediation.

## Intelligence Metadata

- **Sources:** about.gitlab.com
- **Vendor:** GitLab
- **Product:** Serena MCP coding agent
- **Published:** 2026-08-17T00:00:00Z
- **Original:** https://about.gitlab.com/blog/critical-rce-in-serena/
- **Phying News:** https://phying.com/item/6559