Skip to contentNesquena Hermes-webui vulnerabilities
- nesquena hermes-webuiHermes WebUI < 0.51.307 Authentication Bypass via X-Forwarded-For Header SpoofingCVE-2026-581229.3 Critical
- nesquena hermes-webuiHermes WebUI < 0.51.788 Unauthenticated RCE via Terminal APICVE-2026-581239.3 Critical
- nesquena hermes-webuiHermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on ImportCVE-2026-581746.0 Medium
- nesquena hermes-webuiHermes WebUI < 0.51.468 - Resource Exhaustion via Unauthenticated OAuth Flow EndpointCVE-2026-552056.9 Medium
- nesquena hermes-webuiHermes WebUI < 0.51.443 - Cross-Profile Session Data Exfiltration via Session Export EndpointCVE-2026-551987.1 High
- nesquena hermes-webuiHermes WebUI < 0.51.443 - Broken Access Control in /api/session EndpointCVE-2026-551977.1 High
- hermes-webuiHermes WebUI < 0.51.409 - Unauthenticated Passkey Registration via Authentication BypassCVE-2026-551969.1 Critical
- nesquena hermes-webuiHermes WebUI < 0.51.368 - Profile-Scoped Authorization Bypass via Forged hermes_profile CookieCVE-2026-538718.6 High
- nesquena hermes-webuiHermes WebUI < 0.51.358 Unauthenticated Password Takeover via /api/settingsCVE-2026-499739.2 Critical
- nesquena hermes-webuiHermes WebUI < 0.51.311 RCE via Git Configuration InjectionCVE-2026-499598.7 High
- nesquena hermes-webuiHermes WebUI < 0.51.303 TOCTOU Race Condition via git_discardCVE-2026-499584.3 Medium
- nesquena hermes-webuiHermes WebUI < 0.51.296 Workspace Boundary Bypass via api/workspace.pyCVE-2026-499576.3 Medium
- nesquena hermes-webuiHermes WebUI < 0.51.269 Profile Isolation Bypass via sessions searchCVE-2026-499567.1 High
- nesquena hermes-webuiHermes WebUI < 0.51.270 Resource Exhaustion via passkey/optionsCVE-2026-499556.9 Medium
- nesquena hermes-webuiHermes WebUI < 0.51.44 Path Traversal via Session Import EndpointCVE-2026-226776.0 Medium
- get-hermes hermes web ui, nesquena hermes-webui +1 moreNesquena Hermes WebUI Arbitrary File Deletion via Unvalidated session_idCVE-2026-68327.2 High
- nesquena hermes-webuiNesquena Hermes WebUI Environment Variable Credential Leakage via Profile SwitchCVE-2026-68304.8 Medium
- nesquena hermes-webuinesquena hermes-webui Arbitrary Workspace Directory AccessCVE-2026-68295.3 Medium