NNousResearch

Products

Exploited and recent CVEs

• CVE-2026-71963 High 8.8 Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection 0.9%
• CVE-2026-85107 Medium 4.3 NousResearch hermes-agent Electron Main Process main.ts resourceBufferFromUrl allocation of resources 0.5%
• CVE-2026-85106 Medium 6.3 NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgery 0.3%
• CVE-2026-85105 High 7.3 NousResearch hermes-agent Session Management s71.py _sess_nowait authorization 0.5%
• CVE-2026-84289 Medium 4.3 NousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocation 0.5%
• CVE-2026-84288 Medium 4.3 NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of service 0.5%
• CVE-2026-84287 Medium 4.3 NousResearch hermes-agent Session Chat api_server.py denial of service 0.5%
• CVE-2026-82021 High 8.3 Hermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch Reference 0.3%
• CVE-2026-82020 Medium 6.8 Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write Tool 0.4%
• CVE-2026-18993 Medium 6.3 NousResearch hermes-agent Memory Toolset model_tools.py access control 0.4%
• CVE-2026-18976 Medium 6.3 NousResearch hermes-agent disabled_toolsets agent_init.py get_tool_definitions privileges assignment 0.4%
• CVE-2026-18775 Medium 6.3 NousResearch hermes-agent Browser Tooling browser_tool.py browser_snapshot server-side request forgery 0.4%
• CVE-2026-18774 Medium 6.3 NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgery 0.3%
• CVE-2026-18773 Medium 6.3 NousResearch hermes-agent Quick run.py _check_slash_access authorization 0.3%
• CVE-2026-17432 Medium 5.0 NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control 0.4%
• CVE-2026-15311 Low 3.5 NousResearch hermes-agent Matrix Adapter matrix.py MatrixAdapter._markdown_to_html cross site scripting 0.4%
• CVE-2026-14783 Medium 4.3 NousResearch hermes-agent skills_tool.py skill_view path traversal 0.5%
• CVE-2026-14628 Medium 5.3 NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversal 0.8%
• CVE-2026-14627 Medium 5.6 NousResearch hermes-agent Discord Platform Integration discord.py DiscordAdapter._is_allowed_user improper authentication 0.6%
• CVE-2026-14626 Medium 4.3 NousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation denial of service 0.5%
• CVE-2026-14625 Medium 6.3 NousResearch hermes-agent server.py shell.exec protection mechanism 0.4%
• CVE-2026-14617 Low 3.1 NousResearch hermes-agent Streaming Reasoning Tag Filter stream_consumer.py GatewayStreamConsumer._filter_and_accumulate case sensitivity 0.4%
• CVE-2026-53870 Medium 5.5 Hermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store Files 0.2%
• CVE-2026-53869 High 7.5 Hermes Agent < 0.16.0 - DNS Rebinding Bypass via WebSocket Endpoints 0.6%
• CVE-2026-11461 Medium 6.3 NousResearch hermes-agent resume Endpoint hermes_state.py resolve_session_by_title authorization 0.2%
• CVE-2026-10548 Medium 5.3 NousResearch hermes-agent Credential Pool Synchronization credential_pool.py _sync_anthropic_entry_from_credentials_file improper authentication 0.1%
• CVE-2026-10224 Medium 5.3 NousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource consumption 0.4%
• CVE-2026-10223 Medium 6.3 NousResearch hermes-agent memory_tool.py _scan_memory_content injection 0.2%
• CVE-2026-10222 Medium 5.6 NousResearch hermes-agent config.py _sanitize_env_lines injection 0.3%
• CVE-2026-10221 High 7.3 NousResearch hermes-agent run_agent.py _compress_context injection 0.3%