Product by Nousresearch

    Hermes-agent

    44 known vulnerabilities in Hermes-agent (Nousresearch), 0 of them actively exploited (CISA KEV).

    Key figures

    44

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Hermes-agent (Nousresearch)
    HighCVE-2026-9367

    NousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injection

    		7.3
    HighCVE-2026-71963

    Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection

    		8.8
    HighCVE-2026-53869

    Hermes Agent < 0.16.0 - DNS Rebinding Bypass via WebSocket Endpoints

    		7.5
    HighCVE-2026-85105

    NousResearch hermes-agent Session Management s71.py _sess_nowait authorization

    		7.3
    CriticalCVE-2026-82021

    Hermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch Reference

    		8.3
    MediumCVE-2026-9351

    NousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversal

    		6.5
    HighCVE-2026-82020

    Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write Tool

    		6.8
    MediumCVE-2026-14628

    NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversal

    		5.3
    MediumCVE-2026-84287

    NousResearch hermes-agent Session Chat api_server.py denial of service

    		4.3
    MediumCVE-2026-85107

    NousResearch Hermes-agent: Allocation of Resources Without Limits or Throttling

    		4.3
    MediumCVE-2026-14627

    NousResearch Hermes-agent: Improper Authentication

    		5.6
    MediumCVE-2026-84289

    NousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocation

    		4.3
    MediumCVE-2026-84288

    NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of service

    		4.3
    MediumCVE-2026-7396

    NousResearch hermes-agent WeChat Work Platform Adapter wecom.py path traversal

    		5.3
    MediumCVE-2026-85106

    NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgery

    		6.3
    HighCVE-2026-9368

    NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandbox

    		7.3
    MediumCVE-2026-18775

    NousResearch Hermes-agent: Server-Side Request Forgery (SSRF)

    		6.3
    MediumCVE-2026-18993

    NousResearch hermes-agent Memory Toolset model_tools.py access control

    		6.3
    MediumCVE-2026-18976

    NousResearch hermes-agent disabled_toolsets agent_init.py get_tool_definitions privileges assignment

    		6.3
    MediumCVE-2026-10224

    NousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource consumption

    		5.3
    MediumCVE-2026-18774

    NousResearch Hermes-agent: Server-Side Request Forgery (SSRF)

    		6.3
    MediumCVE-2026-18773

    NousResearch hermes-agent Quick run.py _check_slash_access authorization

    		6.3
    MediumCVE-2026-14625

    NousResearch hermes-agent server.py shell.exec protection mechanism

    		6.3
    HighCVE-2026-10221

    NousResearch hermes-agent run_agent.py _compress_context injection

    		7.3
    HighCVE-2026-10220

    NousResearch hermes-agent skills_tool.py skill_view injection

    		7.3

    All vulnerabilities in search

    All products by Nousresearch