Vulnerability · Published Sep 3, 2026 · Assigned by VulDB

CVE-2026-85106NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgery

Medium 6.3

In plain English

A medium-severity server-side request forgery in hermes-agent from NousResearch. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.3%top 71.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in NousResearch hermes-agent 0.18.0. This affects the function fetchLinkTitle of the file apps/desktop/src/app/artifacts/index.tsx of the component Link Title Fetch. Such manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
NousResearch	hermes-agent	0.18.0

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:X

References

VDB-398313 | NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgery vdb-entry, technical-description
VDB-398313 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-85106 | CVE Analysis and Report third-party-advisory
Submit #885132 | NousResearch hermes-agent 0.18.0 Server-Side Request Forgery (SSRF) third-party-advisory