Nousresearch vulnerabilities

Products

• Hermes-agent 44

Newest

• nousresearch hermes-agent Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection CVE-2026-71963 Public exploit 8.6 HighSeptember 3, 2026
• nousresearch hermes-agent NousResearch hermes-agent Electron Main Process main.ts resourceBufferFromUrl allocation of resources CVE-2026-85107 5.3 MediumSeptember 3, 2026
• nousresearch hermes-agent NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgery CVE-2026-85106 5.3 MediumSeptember 3, 2026
• nousresearch hermes-agent NousResearch hermes-agent Session Management s71.py _sess_nowait authorization CVE-2026-85105 6.9 MediumSeptember 3, 2026
• nousresearch hermes-agent NousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocation CVE-2026-84289 5.3 MediumSeptember 1, 2026
• nousresearch hermes-agent NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of service CVE-2026-84288 5.3 MediumSeptember 1, 2026
• nousresearch hermes-agent NousResearch hermes-agent Session Chat api_server.py denial of service CVE-2026-84287 5.3 MediumSeptember 1, 2026
• nousresearch hermes-agent Hermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch Reference CVE-2026-82021 9.0 CriticalAugust 28, 2026
• nousresearch hermes-agent Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write Tool CVE-2026-82020 7.6 HighAugust 28, 2026
• nousresearch hermes-agent NousResearch hermes-agent Memory Toolset model_tools.py access control CVE-2026-18993 5.3 MediumAugust 6, 2026
• nousresearch hermes-agent NousResearch hermes-agent disabled_toolsets agent_init.py get_tool_definitions privileges assignment CVE-2026-18976 5.3 MediumAugust 6, 2026
• nousresearch hermes-agent NousResearch hermes-agent Browser Tooling browser_tool.py browser_snapshot server-side request forgery CVE-2026-18775 5.3 MediumAugust 4, 2026
• nousresearch hermes-agent NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgery CVE-2026-18774 5.3 MediumAugust 4, 2026
• nousresearch hermes-agent NousResearch hermes-agent Quick run.py _check_slash_access authorization CVE-2026-18773 5.3 MediumAugust 4, 2026
• nousresearch hermes-agent NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control CVE-2026-17432 2.3 LowJuly 26, 2026
• nousresearch hermes-agent NousResearch hermes-agent Matrix Adapter matrix.py MatrixAdapter._markdown_to_html cross site scripting CVE-2026-15311 5.1 MediumJuly 9, 2026
• nousresearch hermes-agent NousResearch hermes-agent skills_tool.py skill_view path traversal CVE-2026-14783 5.3 MediumJuly 5, 2026
• nousresearch hermes-agent NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversal CVE-2026-14628 Public exploit 6.9 MediumJuly 4, 2026
• nousresearch hermes-agent NousResearch hermes-agent Discord Platform Integration discord.py DiscordAdapter._is_allowed_user improper authentication CVE-2026-14627 6.3 MediumJuly 4, 2026
• nousresearch hermes-agent NousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation denial of service CVE-2026-14626 5.3 MediumJuly 4, 2026
• nousresearch hermes-agent NousResearch hermes-agent server.py shell.exec protection mechanism CVE-2026-14625 5.3 MediumJuly 4, 2026
• nousresearch hermes-agent NousResearch hermes-agent Streaming Reasoning Tag Filter stream_consumer.py GatewayStreamConsumer._filter_and_accumulate case sensitivity CVE-2026-14617 2.3 LowJuly 3, 2026
• nousresearch hermes-agent Hermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store Files CVE-2026-53870 Fix available 6.8 MediumJune 17, 2026
• nousresearch hermes-agent Hermes Agent < 0.16.0 - DNS Rebinding Bypass via WebSocket Endpoints CVE-2026-53869 Fix available 8.7 HighJune 17, 2026
• nousresearch hermes-agent NousResearch hermes-agent resume Endpoint hermes_state.py resolve_session_by_title authorization CVE-2026-11461 5.3 MediumJune 7, 2026
• nousresearch hermes-agent NousResearch hermes-agent Credential Pool Synchronization credential_pool.py _sync_anthropic_entry_from_credentials_file improper authentication CVE-2026-10548 4.8 MediumJune 2, 2026
• nousresearch hermes-agent NousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource consumption CVE-2026-10224 6.9 MediumJune 1, 2026
• nousresearch hermes-agent NousResearch hermes-agent memory_tool.py _scan_memory_content injection CVE-2026-10223 Fix available 5.3 MediumJune 1, 2026
• nousresearch hermes-agent NousResearch hermes-agent config.py _sanitize_env_lines injection CVE-2026-10222 Fix available 6.3 MediumJune 1, 2026
• nousresearch hermes-agent NousResearch hermes-agent run_agent.py _compress_context injection CVE-2026-10221 6.9 MediumJune 1, 2026
• nousresearch hermes-agent NousResearch hermes-agent skills_tool.py skill_view injection CVE-2026-10220 6.9 MediumJune 1, 2026
• nousresearch hermes-agent NousResearch hermes-agent CLI web-dashboard web_server.py _discover_dashboard_plugins comparison CVE-2026-9369 Fix available 4.8 MediumMay 24, 2026
• nousresearch hermes-agent NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandbox CVE-2026-9368 Fix available 6.9 MediumMay 24, 2026
• nousresearch hermes-agent NousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injection CVE-2026-9367 6.9 MediumMay 24, 2026
• nousresearch hermes-agent NousResearch hermes-agent prompt_builder.py _scan_context_content injection CVE-2026-9366 Fix available 6.9 MediumMay 24, 2026
• nousresearch hermes-agent NousResearch hermes-agent Slack Agent/Mattermost Agent escape output CVE-2026-9354 6.9 MediumMay 24, 2026
• nousresearch hermes-agent NousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injection CVE-2026-9353 Fix available 6.9 MediumMay 24, 2026
• nousresearch hermes-agent NousResearch hermes-agent Messaging Gateway local.py _make_run_env information disclosure CVE-2026-9352 6.9 MediumMay 24, 2026
• nousresearch hermes-agent NousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversal CVE-2026-9351 6.9 MediumMay 24, 2026
• nousresearch hermes-agent NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization CVE-2026-9350 6.9 MediumMay 24, 2026
• nousresearch hermes-agent NousResearch hermes-agent file_tools.py _check_sensitive_path symlink CVE-2026-7397 4.8 MediumApril 29, 2026
• nousresearch hermes-agent NousResearch hermes-agent WeChat Work Platform Adapter wecom.py path traversal CVE-2026-7396 6.9 MediumApril 29, 2026
• nousresearch hermes-agent NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication CVE-2026-7113 6.3 MediumApril 27, 2026
• nousresearch hermes-agent NousResearch hermes-agent API_SERVER_KEY api_server.py _check_auth improper authentication CVE-2026-7112 6.3 MediumApril 27, 2026