Remote code execution via DNS-rebound memory poisoning

Remote code execution in Oraios Software Serena before 1.5.2 allows remote attackers to execute OS commands after a malicious webpage is visited. The default Flask dashboard accepts unauthenticated /save_memory requests without Host validation, stores attacker-supplied instructions, and later feeds them to an agent whose execute_shell_command tool invokes subprocess.Popen with shell=True. Exploitation requires Serena to be running with its default dashboard and a user to visit an attacker-controlled page; the chain executes commands as the Serena process.