CVE-2026-109965

12th percentile - higher than 12% of all known CVEs

Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.is_path_in_project() normalizes paths lexically without resolving symlinks, so file tools like read_file and create_text_file can read or overwrite files such as SSH keys or cloud credentials.

An attacker can access sensitive files outside the project, including SSH keys and cloud credentials, leading to a security breach. This may result in unauthorized access to systems and services.

Update Serena to version 2.0.0 or later. Review repositories for malicious symlinks and restrict file tool permissions.