nesquena Hermes WebUI

• CVE-2026-58122 Critical 9.1 Hermes WebUI < 0.51.307 Authentication Bypass via X-Forwarded-For Header Spoofing 0.4%
• CVE-2026-58123 Critical 9.8 Hermes WebUI < 0.51.788 Unauthenticated RCE via Terminal API 4.6%
• CVE-2026-58174 Medium 6.5 Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import 0.5%
• CVE-2026-55205 Medium 5.3 Hermes WebUI < 0.51.468 - Resource Exhaustion via Unauthenticated OAuth Flow Endpoint 0.5%
• CVE-2026-55198 Medium 6.5 Hermes WebUI < 0.51.443 - Cross-Profile Session Data Exfiltration via Session Export Endpoint 0.3%
• CVE-2026-55197 Medium 6.5 Hermes WebUI < 0.51.443 - Broken Access Control in /api/session Endpoint 0.3%
• CVE-2026-53871 High 8.1 Hermes WebUI < 0.51.368 - Profile-Scoped Authorization Bypass via Forged hermes_profile Cookie 0.4%
• CVE-2026-49973 Critical 9.4 Hermes WebUI < 0.51.358 Unauthenticated Password Takeover via /api/settings 0.5%
• CVE-2026-49959 High 8.8 Hermes WebUI < 0.51.311 RCE via Git Configuration Injection 0.9%
• CVE-2026-49958 Medium 5.0 Hermes WebUI < 0.51.303 TOCTOU Race Condition via git_discard <0.1%
• CVE-2026-49957 High 7.7 Hermes WebUI < 0.51.296 Workspace Boundary Bypass via api/workspace.py 0.4%
• CVE-2026-49956 Medium 6.5 Hermes WebUI < 0.51.269 Profile Isolation Bypass via sessions search 0.3%
• CVE-2026-49955 Medium 5.3 Hermes WebUI < 0.51.270 Resource Exhaustion via passkey/options 0.6%
• CVE-2026-11322 Medium 6.5 Hermes WebUI before 0.51.221 Path Traversal via Symlink Workspace Bypass 0.3%
• CVE-2026-22677 Medium 6.5 Hermes WebUI < 0.51.44 Path Traversal via Session Import Endpoint 0.4%
• CVE-2026-6832 High 8.1 Nesquena Hermes WebUI Arbitrary File Deletion via Unvalidated session_id 0.5%
• CVE-2026-6830 Low 3.3 Nesquena Hermes WebUI Environment Variable Credential Leakage via Profile Switch 0.1%
• CVE-2026-6829 Medium 6.3 nesquena hermes-webui Arbitrary Workspace Directory Access 0.3%