hermes-agent
The self-improving AI agent — creates skills from experience, improves them during use, and runs anywhere
Activity
- Latest release
- 1mo ago
- Total releases
- 11
- Cadence
- ~6 days
- Last 12 months
- 11
Details
- License
- MIT
- First release
- May 14, 2026
| Version | Released | |
|---|---|---|
0.19.0
minor
2 CVEs
CVE-2026-10224
PYSEC-2026-3576
GHSA-pmqc-57g8-c22c
Aug 04, 2026
hermes-agent has an Uncontrolled Resource Consumption issue
Medium
Network
Low
None
None
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function _handle_webhook_request of the file gateway/platforms/feishu.py of the component Webhook Endpoint. Such manipulation leads to resource consumption. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10221
PYSEC-2026-3577
GHSA-xq8w-9jvx-gm3v
Aug 04, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev |
0.19.0
minor
Dependencies (82)
+ 74 more |
|
0.18.2
patch
2 CVEs
CVE-2026-10224
PYSEC-2026-3576
GHSA-pmqc-57g8-c22c
Aug 04, 2026
hermes-agent has an Uncontrolled Resource Consumption issue
Medium
Network
Low
None
None
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function _handle_webhook_request of the file gateway/platforms/feishu.py of the component Webhook Endpoint. Such manipulation leads to resource consumption. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10221
PYSEC-2026-3577
GHSA-xq8w-9jvx-gm3v
Aug 04, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev |
0.18.2
patch
Dependencies (82)
+ 74 more |
|
0.18.1
patch
2 CVEs
CVE-2026-10224
PYSEC-2026-3576
GHSA-pmqc-57g8-c22c
Aug 04, 2026
hermes-agent has an Uncontrolled Resource Consumption issue
Medium
Network
Low
None
None
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function _handle_webhook_request of the file gateway/platforms/feishu.py of the component Webhook Endpoint. Such manipulation leads to resource consumption. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10221
PYSEC-2026-3577
GHSA-xq8w-9jvx-gm3v
Aug 04, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev |
0.18.1
patch
Dependencies (82)
+ 74 more |
|
0.18.0
minor
2 CVEs
CVE-2026-10224
PYSEC-2026-3576
GHSA-pmqc-57g8-c22c
Aug 04, 2026
hermes-agent has an Uncontrolled Resource Consumption issue
Medium
Network
Low
None
None
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function _handle_webhook_request of the file gateway/platforms/feishu.py of the component Webhook Endpoint. Such manipulation leads to resource consumption. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10221
PYSEC-2026-3577
GHSA-xq8w-9jvx-gm3v
Aug 04, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev |
0.18.0
minor
Dependencies (82)
+ 74 more |
|
0.17.0
minor
3 CVEs
CVE-2026-10224
PYSEC-2026-3576
GHSA-pmqc-57g8-c22c
Aug 04, 2026
hermes-agent has an Uncontrolled Resource Consumption issue
Medium
Network
Low
None
None
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function _handle_webhook_request of the file gateway/platforms/feishu.py of the component Webhook Endpoint. Such manipulation leads to resource consumption. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10221
PYSEC-2026-3577
GHSA-xq8w-9jvx-gm3v
Aug 04, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10222
PYSEC-2026-2513
GHSA-mv8x-fg99-32mf
Jul 13, 2026
hermes-agent has an Injection issue
Medium
Network
High
None
None
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this issue is the function _sanitize_env_lines of the file hermes_cli/config.py. The manipulation results in injection. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
Fixed in
0.18.0
References
Updated Jul 13, 2026 · Source: OSV.dev |
0.17.0
minor
Dependencies (78)
+ 70 more |
|
0.16.0
minor
3 CVEs
CVE-2026-10224
PYSEC-2026-3576
GHSA-pmqc-57g8-c22c
Aug 04, 2026
hermes-agent has an Uncontrolled Resource Consumption issue
Medium
Network
Low
None
None
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function _handle_webhook_request of the file gateway/platforms/feishu.py of the component Webhook Endpoint. Such manipulation leads to resource consumption. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10221
PYSEC-2026-3577
GHSA-xq8w-9jvx-gm3v
Aug 04, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10222
PYSEC-2026-2513
GHSA-mv8x-fg99-32mf
Jul 13, 2026
hermes-agent has an Injection issue
Medium
Network
High
None
None
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this issue is the function _sanitize_env_lines of the file hermes_cli/config.py. The manipulation results in injection. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
Fixed in
0.18.0
References
Updated Jul 13, 2026 · Source: OSV.dev |
0.16.0
minor
Dependencies (72)
+ 64 more |
|
0.15.2
patch
5 CVEs
CVE-2026-10224
PYSEC-2026-3576
GHSA-pmqc-57g8-c22c
Aug 04, 2026
hermes-agent has an Uncontrolled Resource Consumption issue
Medium
Network
Low
None
None
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function _handle_webhook_request of the file gateway/platforms/feishu.py of the component Webhook Endpoint. Such manipulation leads to resource consumption. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10221
PYSEC-2026-3577
GHSA-xq8w-9jvx-gm3v
Aug 04, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-53869
PYSEC-2026-2510
GHSA-4pqm-j46f-795x
Jul 13, 2026
Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation
High
Network
Low
None
None
Hermes Agent before 0.16.0 contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation. FastAPI HTTP middleware does not execute for WebSocket upgrade requests on /api/pty, /api/ws, /api/pub, and /api/events endpoints, enabling attackers to exploit DNS rebinding and inject malicious commands or read terminal output. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
Fixed in
0.16.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-53870
PYSEC-2026-2511
GHSA-99f9-j8r3-p853
Jul 13, 2026
Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)
High
Local
Low
Low
None
Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attackers with local filesystem access can read these files directly to obtain sensitive data including conversation history, tool payloads, prompts, and per-route HMAC secrets. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
Fixed in
0.16.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10222
PYSEC-2026-2513
GHSA-mv8x-fg99-32mf
Jul 13, 2026
hermes-agent has an Injection issue
Medium
Network
High
None
None
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this issue is the function _sanitize_env_lines of the file hermes_cli/config.py. The manipulation results in injection. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
Fixed in
0.18.0
References
Updated Jul 13, 2026 · Source: OSV.dev |
0.15.2
patch
Dependencies (66)
+ 58 more |
|
0.15.1
patch
5 CVEs
CVE-2026-10224
PYSEC-2026-3576
GHSA-pmqc-57g8-c22c
Aug 04, 2026
hermes-agent has an Uncontrolled Resource Consumption issue
Medium
Network
Low
None
None
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function _handle_webhook_request of the file gateway/platforms/feishu.py of the component Webhook Endpoint. Such manipulation leads to resource consumption. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10221
PYSEC-2026-3577
GHSA-xq8w-9jvx-gm3v
Aug 04, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-53869
PYSEC-2026-2510
GHSA-4pqm-j46f-795x
Jul 13, 2026
Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation
High
Network
Low
None
None
Hermes Agent before 0.16.0 contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation. FastAPI HTTP middleware does not execute for WebSocket upgrade requests on /api/pty, /api/ws, /api/pub, and /api/events endpoints, enabling attackers to exploit DNS rebinding and inject malicious commands or read terminal output. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
Fixed in
0.16.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-53870
PYSEC-2026-2511
GHSA-99f9-j8r3-p853
Jul 13, 2026
Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)
High
Local
Low
Low
None
Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attackers with local filesystem access can read these files directly to obtain sensitive data including conversation history, tool payloads, prompts, and per-route HMAC secrets. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
Fixed in
0.16.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10222
PYSEC-2026-2513
GHSA-mv8x-fg99-32mf
Jul 13, 2026
hermes-agent has an Injection issue
Medium
Network
High
None
None
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this issue is the function _sanitize_env_lines of the file hermes_cli/config.py. The manipulation results in injection. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
Fixed in
0.18.0
References
Updated Jul 13, 2026 · Source: OSV.dev |
0.15.1
patch
Dependencies (66)
+ 58 more |
|
0.15.0
minor
5 CVEs
CVE-2026-10224
PYSEC-2026-3576
GHSA-pmqc-57g8-c22c
Aug 04, 2026
hermes-agent has an Uncontrolled Resource Consumption issue
Medium
Network
Low
None
None
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function _handle_webhook_request of the file gateway/platforms/feishu.py of the component Webhook Endpoint. Such manipulation leads to resource consumption. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10221
PYSEC-2026-3577
GHSA-xq8w-9jvx-gm3v
Aug 04, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-53869
PYSEC-2026-2510
GHSA-4pqm-j46f-795x
Jul 13, 2026
Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation
High
Network
Low
None
None
Hermes Agent before 0.16.0 contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation. FastAPI HTTP middleware does not execute for WebSocket upgrade requests on /api/pty, /api/ws, /api/pub, and /api/events endpoints, enabling attackers to exploit DNS rebinding and inject malicious commands or read terminal output. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
Fixed in
0.16.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-53870
PYSEC-2026-2511
GHSA-99f9-j8r3-p853
Jul 13, 2026
Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)
High
Local
Low
Low
None
Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attackers with local filesystem access can read these files directly to obtain sensitive data including conversation history, tool payloads, prompts, and per-route HMAC secrets. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
Fixed in
0.16.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10222
PYSEC-2026-2513
GHSA-mv8x-fg99-32mf
Jul 13, 2026
hermes-agent has an Injection issue
Medium
Network
High
None
None
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this issue is the function _sanitize_env_lines of the file hermes_cli/config.py. The manipulation results in injection. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
Fixed in
0.18.0
References
Updated Jul 13, 2026 · Source: OSV.dev |
0.15.0
minor
Dependencies (66)
+ 58 more |
|
0.14.0
minor
9 CVEs
CVE-2026-10224
PYSEC-2026-3576
GHSA-pmqc-57g8-c22c
Aug 04, 2026
hermes-agent has an Uncontrolled Resource Consumption issue
Medium
Network
Low
None
None
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function _handle_webhook_request of the file gateway/platforms/feishu.py of the component Webhook Endpoint. Such manipulation leads to resource consumption. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10223
PYSEC-2026-3575
GHSA-33qv-c5qm-799v
Aug 04, 2026
hermes-agent has an Injection issue
Medium
Network
Low
Low
None
A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function _scan_memory_content of the file tools/memory_tool.py. This manipulation causes injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
Fixed in
0.15.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10221
PYSEC-2026-3577
GHSA-xq8w-9jvx-gm3v
Aug 04, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-53869
PYSEC-2026-2510
GHSA-4pqm-j46f-795x
Jul 13, 2026
Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation
High
Network
Low
None
None
Hermes Agent before 0.16.0 contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation. FastAPI HTTP middleware does not execute for WebSocket upgrade requests on /api/pty, /api/ws, /api/pub, and /api/events endpoints, enabling attackers to exploit DNS rebinding and inject malicious commands or read terminal output. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
Fixed in
0.16.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-53870
PYSEC-2026-2511
GHSA-99f9-j8r3-p853
Jul 13, 2026
Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)
High
Local
Low
Low
None
Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attackers with local filesystem access can read these files directly to obtain sensitive data including conversation history, tool payloads, prompts, and per-route HMAC secrets. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
Fixed in
0.16.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10222
PYSEC-2026-2513
GHSA-mv8x-fg99-32mf
Jul 13, 2026
hermes-agent has an Injection issue
Medium
Network
High
None
None
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this issue is the function _sanitize_env_lines of the file hermes_cli/config.py. The manipulation results in injection. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
Fixed in
0.18.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-9369
PYSEC-2026-2512
GHSA-cv5c-mh6j-wvp9
Jul 13, 2026
hermes-agent has an Incorrect Comparison
Medium
Local
Low
Low
None
A security flaw has been discovered in NousResearch hermes-agent 2026.4.23. Affected is the function _discover_dashboard_plugins of the file hermes_cli/web_server.py of the component CLI web-dashboard Interface. Performing a manipulation of the argument HERMES_ENABLE_PROJECT_PLUGINS results in incorrect comparison. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
Fixed in
0.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-9366
PYSEC-2026-2514
GHSA-pgp4-xr4j-h5cg
Jul 13, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A vulnerability was found in NousResearch hermes-agent 2026.4.23. The impacted element is the function _scan_context_content of the file agent/prompt_builder.py. The manipulation results in injection. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
Fixed in
0.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-9353
PYSEC-2026-2509
GHSA-238w-f66p-w349
Jul 13, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.23. Impacted is an unknown function of the file agent/skills_guard.py of the component Skills Guard Multi-Word Prompt Handler. The manipulation of the argument THREAT_PATTERNS leads to injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
Fixed in
0.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev |
0.14.0
minor
Dependencies (66)
+ 58 more |
|
0.13.0
initial
9 CVEs
CVE-2026-10224
PYSEC-2026-3576
GHSA-pmqc-57g8-c22c
Aug 04, 2026
hermes-agent has an Uncontrolled Resource Consumption issue
Medium
Network
Low
None
None
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function _handle_webhook_request of the file gateway/platforms/feishu.py of the component Webhook Endpoint. Such manipulation leads to resource consumption. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10223
PYSEC-2026-3575
GHSA-33qv-c5qm-799v
Aug 04, 2026
hermes-agent has an Injection issue
Medium
Network
Low
Low
None
A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function _scan_memory_content of the file tools/memory_tool.py. This manipulation causes injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
Fixed in
0.15.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-10221
PYSEC-2026-3577
GHSA-xq8w-9jvx-gm3v
Aug 04, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
0.18.0
0.18.1
0.18.2
0.19.0
References
Updated Aug 04, 2026 · Source: OSV.dev
CVE-2026-53869
PYSEC-2026-2510
GHSA-4pqm-j46f-795x
Jul 13, 2026
Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation
High
Network
Low
None
None
Hermes Agent before 0.16.0 contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation. FastAPI HTTP middleware does not execute for WebSocket upgrade requests on /api/pty, /api/ws, /api/pub, and /api/events endpoints, enabling attackers to exploit DNS rebinding and inject malicious commands or read terminal output. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
Fixed in
0.16.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-53870
PYSEC-2026-2511
GHSA-99f9-j8r3-p853
Jul 13, 2026
Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)
High
Local
Low
Low
None
Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attackers with local filesystem access can read these files directly to obtain sensitive data including conversation history, tool payloads, prompts, and per-route HMAC secrets. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
Fixed in
0.16.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10222
PYSEC-2026-2513
GHSA-mv8x-fg99-32mf
Jul 13, 2026
hermes-agent has an Injection issue
Medium
Network
High
None
None
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this issue is the function _sanitize_env_lines of the file hermes_cli/config.py. The manipulation results in injection. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
0.15.0
0.15.1
0.15.2
0.16.0
0.17.0
Fixed in
0.18.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-9369
PYSEC-2026-2512
GHSA-cv5c-mh6j-wvp9
Jul 13, 2026
hermes-agent has an Incorrect Comparison
Medium
Local
Low
Low
None
A security flaw has been discovered in NousResearch hermes-agent 2026.4.23. Affected is the function _discover_dashboard_plugins of the file hermes_cli/web_server.py of the component CLI web-dashboard Interface. Performing a manipulation of the argument HERMES_ENABLE_PROJECT_PLUGINS results in incorrect comparison. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
Fixed in
0.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-9366
PYSEC-2026-2514
GHSA-pgp4-xr4j-h5cg
Jul 13, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A vulnerability was found in NousResearch hermes-agent 2026.4.23. The impacted element is the function _scan_context_content of the file agent/prompt_builder.py. The manipulation results in injection. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
Fixed in
0.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-9353
PYSEC-2026-2509
GHSA-238w-f66p-w349
Jul 13, 2026
hermes-agent has an Injection issue
Medium
Network
Low
None
None
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.23. Impacted is an unknown function of the file agent/skills_guard.py of the component Skills Guard Multi-Word Prompt Handler. The manipulation of the argument THREAT_PATTERNS leads to injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.13.0
0.14.0
Fixed in
0.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev |
0.13.0
initial
Dependencies (68)
+ 60 more |