# NousResearch hermes-agent.

Every CVE that names NousResearch hermes-agent among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection](https://agentprime.io/advisories/CVE-2026-71963.md)
  `CVE-2026-71963` · CVE record: NousResearch hermes-agent · CVSS 8.6 High · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [NousResearch hermes-agent Electron Main Process main.ts resourceBufferFromUrl allocation of resources](https://agentprime.io/advisories/CVE-2026-85107.md)
  `CVE-2026-85107` · CVE record: NousResearch hermes-agent · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Denial of service
- [NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgery](https://agentprime.io/advisories/CVE-2026-85106.md)
  `CVE-2026-85106` · CVE record: NousResearch hermes-agent · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [NousResearch hermes-agent Session Management s71.py \_sess_nowait authorization](https://agentprime.io/advisories/CVE-2026-85105.md)
  `CVE-2026-85105` · CVE record: NousResearch hermes-agent · CVSS 6.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Broken access control
- [NousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocation](https://agentprime.io/advisories/CVE-2026-84289.md)
  `CVE-2026-84289` · CVE record: NousResearch hermes-agent · CVSS 5.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service
- [NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of service](https://agentprime.io/advisories/CVE-2026-84288.md)
  `CVE-2026-84288` · CVE record: NousResearch hermes-agent · CVSS 5.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service
- [NousResearch hermes-agent Session Chat api_server.py denial of service](https://agentprime.io/advisories/CVE-2026-84287.md)
  `CVE-2026-84287` · CVE record: NousResearch hermes-agent · CVSS 5.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service
- [Hermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch Reference](https://agentprime.io/advisories/CVE-2026-82021.md)
  `CVE-2026-82021` · CVE record: NousResearch hermes-agent · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-494
- [Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write Tool](https://agentprime.io/advisories/CVE-2026-82020.md)
  `CVE-2026-82020` · CVE record: NousResearch hermes-agent · CVSS 7.6 High · Not analysed yet · Published 28 Aug 2026 · Tags: Information disclosure
- [NousResearch hermes-agent Memory Toolset model_tools.py access control](https://agentprime.io/advisories/CVE-2026-18993.md)
  `CVE-2026-18993` · CVE record: NousResearch hermes-agent · CVSS 5.3 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Privilege escalation, Broken access control
- [NousResearch hermes-agent disabled_toolsets agent_init.py get_tool_definitions privileges assignment](https://agentprime.io/advisories/CVE-2026-18976.md)
  `CVE-2026-18976` · CVE record: NousResearch hermes-agent · CVSS 5.3 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Privilege escalation
- [NousResearch hermes-agent Browser Tooling browser_tool.py browser_snapshot server-side request forgery](https://agentprime.io/advisories/CVE-2026-18775.md)
  `CVE-2026-18775` · CVE record: NousResearch hermes-agent · CVSS 5.3 Medium · Not analysed yet · Published 4 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgery](https://agentprime.io/advisories/CVE-2026-18774.md)
  `CVE-2026-18774` · CVE record: NousResearch hermes-agent · CVSS 5.3 Medium · Not analysed yet · Published 4 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [NousResearch hermes-agent Quick run.py \_check_slash_access authorization](https://agentprime.io/advisories/CVE-2026-18773.md)
  `CVE-2026-18773` · CVE record: NousResearch hermes-agent · CVSS 5.3 Medium · Not analysed yet · Published 4 Aug 2026 · Tags: Broken access control
- [NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control](https://agentprime.io/advisories/CVE-2026-17432.md)
  `CVE-2026-17432` · CVE record: NousResearch hermes-agent · CVSS 2.3 Low · Not analysed yet · Published 26 Jul 2026 · Tags: Privilege escalation, Broken access control
- [NousResearch hermes-agent Matrix Adapter matrix.py MatrixAdapter.\_markdown_to_html cross site scripting](https://agentprime.io/advisories/CVE-2026-15311.md)
  `CVE-2026-15311` · CVE record: NousResearch hermes-agent · CVSS 5.1 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Cross-site scripting (XSS), Code injection
- [NousResearch hermes-agent skills_tool.py skill_view path traversal](https://agentprime.io/advisories/CVE-2026-14783.md)
  `CVE-2026-14783` · CVE record: NousResearch hermes-agent · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Path traversal
- [NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversal](https://agentprime.io/advisories/CVE-2026-14628.md)
  `CVE-2026-14628` · CVE record: NousResearch hermes-agent · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Path traversal
- [NousResearch hermes-agent Discord Platform Integration discord.py DiscordAdapter.\_is_allowed_user improper authentication](https://agentprime.io/advisories/CVE-2026-14627.md)
  `CVE-2026-14627` · CVE record: NousResearch hermes-agent · CVSS 6.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Authentication bypass
- [NousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation denial of service](https://agentprime.io/advisories/CVE-2026-14626.md)
  `CVE-2026-14626` · CVE record: NousResearch hermes-agent · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Denial of service
- [NousResearch hermes-agent server.py shell.exec protection mechanism](https://agentprime.io/advisories/CVE-2026-14625.md)
  `CVE-2026-14625` · CVE record: NousResearch hermes-agent · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: CWE-693
- [NousResearch hermes-agent Streaming Reasoning Tag Filter stream_consumer.py GatewayStreamConsumer.\_filter_and_accumulate case sensitivity](https://agentprime.io/advisories/CVE-2026-14617.md)
  `CVE-2026-14617` · CVE record: NousResearch hermes-agent · CVSS 2.3 Low · Not analysed yet · Published 3 Jul 2026 · Tags: CWE-178, CWE-697
- [NousResearch hermes-agent resume Endpoint hermes_state.py resolve_session_by_title authorization](https://agentprime.io/advisories/CVE-2026-11461.md)
  `CVE-2026-11461` · CVE record: NousResearch hermes-agent · CVSS 5.3 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Broken access control
- [NousResearch hermes-agent Credential Pool Synchronization credential_pool.py \_sync_anthropic_entry_from_credentials_file improper authentication](https://agentprime.io/advisories/CVE-2026-10548.md)
  `CVE-2026-10548` · CVE record: NousResearch hermes-agent · CVSS 4.8 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Authentication bypass
- [NousResearch hermes-agent skills_tool.py skill_view injection](https://agentprime.io/advisories/CVE-2026-10220.md)
  `CVE-2026-10220` · CVE record: NousResearch hermes-agent · CVSS 6.9 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Other injection, CWE-707
- [NousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injection](https://agentprime.io/advisories/CVE-2026-9367.md)
  `CVE-2026-9367` · CVE record: NousResearch hermes-agent · CVSS 6.9 Medium · Not analysed yet · Published 24 May 2026 · Tags: Command injection
- [NousResearch hermes-agent Slack Agent/Mattermost Agent escape output](https://agentprime.io/advisories/CVE-2026-9354.md)
  `CVE-2026-9354` · CVE record: NousResearch hermes-agent · CVSS 6.9 Medium · Not analysed yet · Published 24 May 2026 · Tags: Other injection, CWE-116
- [NousResearch hermes-agent Messaging Gateway local.py \_make_run_env information disclosure](https://agentprime.io/advisories/CVE-2026-9352.md)
  `CVE-2026-9352` · CVE record: NousResearch hermes-agent · CVSS 6.9 Medium · Not analysed yet · Published 24 May 2026 · Tags: Information disclosure, Broken access control
- [NousResearch hermes-agent read_file Tool file_tools.py \_is_blocked_device path traversal](https://agentprime.io/advisories/CVE-2026-9351.md)
  `CVE-2026-9351` · CVE record: NousResearch hermes-agent · CVSS 6.9 Medium · Not analysed yet · Published 24 May 2026 · Tags: Path traversal
- [NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization](https://agentprime.io/advisories/CVE-2026-9350.md)
  `CVE-2026-9350` · CVE record: NousResearch hermes-agent · CVSS 6.9 Medium · Not analysed yet · Published 24 May 2026 · Tags: Broken access control
- [NousResearch hermes-agent file_tools.py \_check_sensitive_path symlink](https://agentprime.io/advisories/CVE-2026-7397.md)
  `CVE-2026-7397` · CVE record: NousResearch hermes-agent · CVSS 4.8 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Path traversal, CWE-61
- [NousResearch hermes-agent WeChat Work Platform Adapter wecom.py path traversal](https://agentprime.io/advisories/CVE-2026-7396.md)
  `CVE-2026-7396` · CVE record: NousResearch hermes-agent · CVSS 6.9 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Path traversal
- [NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication](https://agentprime.io/advisories/CVE-2026-7113.md)
  `CVE-2026-7113` · CVE record: NousResearch hermes-agent · CVSS 6.3 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Authentication bypass
- [NousResearch hermes-agent API_SERVER_KEY api_server.py \_check_auth improper authentication](https://agentprime.io/advisories/CVE-2026-7112.md)
  `CVE-2026-7112` · CVE record: NousResearch hermes-agent · CVSS 6.3 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Authentication bypass

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=nousresearch-hermes-agent>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/nousresearch-hermes-agent/>. Everything for agents: <https://agentprime.io/llms.txt>.