Vulnerability · Published Jun 1, 2026 · Assigned by VulDB

CVE-2026-10220NousResearch hermes-agent skills_tool.py skill_view injection

High 7.3

In plain English

A high-severity injection in hermes-agent from NousResearch. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.3%top 76.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was determined in NousResearch hermes-agent up to 2026.4.30. Affected is the function _serve_plugin_skill/skill_view of the file tools/skills_tool.py. Executing a manipulation can lead to injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
NousResearch	hermes-agent	2026.4.02026.4.12026.4.22026.4.32026.4.42026.4.52026.4.62026.4.7

Weakness: CWE-74, CWE-707 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-367499 | NousResearch hermes-agent skills_tool.py skill_view injection vdb-entry, technical-description
VDB-367499 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-10220 | CVE Analysis and Report third-party-advisory
Submit #822018 | NousResearch hermes-agent <= v2026.4.30 Improper Input Validation (CWE-20) third-party-advisory
https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08 exploit