Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

hermes-agent — Vulnerabilities & Security Advisories 44

All 44 CVE vulnerabilities found in hermes-agent, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the hermes-agent software, focusing on specific weakness types and relevant security tags. It compiles data on known flaws such as remote code execution, privilege escalation, and information disclosure, covering reports from recent years through current advisories. Readers can use this resource to track vendor-issued advisories, analyze the prevalence of particular weakness classes within the application, or review the comprehensive vulnerability history of the hermes-agent product to assess its overall security posture and evolution over time.

Vendor: NousResearch

CVE ID Title CVSS Severity Published
CVE-2026-10220 NousResearch hermes-agent skills_tool.py skill_view injection CWE-74 7.3 High 2026-06-01
CVE-2026-9369 NousResearch hermes-agent CLI web-dashboard web_server.py _discover_dashboard_plugins comparison CWE-697 5.3 Medium 2026-05-24
CVE-2026-9368 NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandbox CWE-265 7.3 High 2026-05-24
CVE-2026-9367 NousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injection CWE-78 7.3 High 2026-05-24
CVE-2026-9366 NousResearch hermes-agent prompt_builder.py _scan_context_content injection CWE-74 7.3 High 2026-05-24
CVE-2026-9354 NousResearch hermes-agent Slack Agent/Mattermost Agent escape output CWE-116 6.5 Medium 2026-05-24
CVE-2026-9353 NousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injection CWE-74 7.3 High 2026-05-24
CVE-2026-9352 NousResearch hermes-agent Messaging Gateway local.py _make_run_env information disclosure CWE-200 5.3 Medium 2026-05-24
CVE-2026-9351 NousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversal CWE-22 6.5 Medium 2026-05-24
CVE-2026-9350 NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization CWE-862 7.3 High 2026-05-24
CVE-2026-7397 NousResearch hermes-agent file_tools.py _check_sensitive_path symlink CWE-61 4.4 Medium 2026-04-29
CVE-2026-7396 NousResearch hermes-agent WeChat Work Platform Adapter wecom.py path traversal CWE-22 5.3 Medium 2026-04-29
CVE-2026-7113 NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication CWE-306 5.6 Medium 2026-04-27
CVE-2026-7112 NousResearch hermes-agent API_SERVER_KEY api_server.py _check_auth improper authentication CWE-287 5.6 Medium 2026-04-27

All 44 known CVE vulnerabilities affecting hermes-agent with full Chinese analysis, references, and POCs where available.