pythonserenamcpcoding-agentsecurityafter-workstart-using
Getting Started with Serena MCP (Safely)
Use Serena MCP only after upgrading past the August 2026 RCE, on a throwaway repo, with after-work safety first.
Academy notes
Articles and updates from SoloQuant Academy.
Tag: serena
Use Serena MCP only after upgrading past the August 2026 RCE, on a throwaway repo, with after-work safety first.
GitLab found critical RCE in Serena MCP (GHSA-pp25-4cg4-qcr9): malicious .serena/project.yml + Jinja could run code on open. Update serena-agent 1.7.0. MCP is a high-privilege local attack surface for after-work learners.