agentprime: nousresearch-hermes-agentEvery new CVE for nousresearch-hermes-agent.https://agentprime.io/CVE-2026-71963: Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injectionhttps://agentprime.io/advisories/CVE-2026-71963/https://agentprime.io/advisories/CVE-2026-71963/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 15:19:30 GMTCVECVE-2026-85107: NousResearch hermes-agent Electron Main Process main.ts resourceBufferFromUrl allocation of resourceshttps://agentprime.io/advisories/CVE-2026-85107/https://agentprime.io/advisories/CVE-2026-85107/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 12:45:08 GMTCVECVE-2026-85106: NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-85106/https://agentprime.io/advisories/CVE-2026-85106/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 11:45:06 GMTCVECVE-2026-85105: NousResearch hermes-agent Session Management s71.py _sess_nowait authorizationhttps://agentprime.io/advisories/CVE-2026-85105/https://agentprime.io/advisories/CVE-2026-85105/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 11:00:08 GMTCVECVE-2026-84289: NousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocationhttps://agentprime.io/advisories/CVE-2026-84289/https://agentprime.io/advisories/CVE-2026-84289/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 21:45:09 GMTCVECVE-2026-84288: NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of servicehttps://agentprime.io/advisories/CVE-2026-84288/https://agentprime.io/advisories/CVE-2026-84288/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 21:15:11 GMTCVECVE-2026-84287: NousResearch hermes-agent Session Chat api_server.py denial of servicehttps://agentprime.io/advisories/CVE-2026-84287/https://agentprime.io/advisories/CVE-2026-84287/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 21:00:09 GMTCVECVE-2026-82021: Hermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch Referencehttps://agentprime.io/advisories/CVE-2026-82021/https://agentprime.io/advisories/CVE-2026-82021/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 18:50:38 GMTCVEcriticalCVE-2026-82020: Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write Toolhttps://agentprime.io/advisories/CVE-2026-82020/https://agentprime.io/advisories/CVE-2026-82020/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 18:47:06 GMTCVECVE-2026-18993: NousResearch hermes-agent Memory Toolset model_tools.py access controlhttps://agentprime.io/advisories/CVE-2026-18993/https://agentprime.io/advisories/CVE-2026-18993/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 03:45:10 GMTCVECVE-2026-18976: NousResearch hermes-agent disabled_toolsets agent_init.py get_tool_definitions privileges assignmenthttps://agentprime.io/advisories/CVE-2026-18976/https://agentprime.io/advisories/CVE-2026-18976/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 01:45:12 GMTCVECVE-2026-18775: NousResearch hermes-agent Browser Tooling browser_tool.py browser_snapshot server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-18775/https://agentprime.io/advisories/CVE-2026-18775/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Aug 2026 16:15:09 GMTCVECVE-2026-18774: NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-18774/https://agentprime.io/advisories/CVE-2026-18774/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Aug 2026 16:00:11 GMTCVECVE-2026-18773: NousResearch hermes-agent Quick run.py _check_slash_access authorizationhttps://agentprime.io/advisories/CVE-2026-18773/https://agentprime.io/advisories/CVE-2026-18773/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Aug 2026 15:00:09 GMTCVECVE-2026-17432: NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access controlhttps://agentprime.io/advisories/CVE-2026-17432/https://agentprime.io/advisories/CVE-2026-17432/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 26 Jul 2026 00:15:11 GMTCVECVE-2026-15311: NousResearch hermes-agent Matrix Adapter matrix.py MatrixAdapter._markdown_to_html cross site scriptinghttps://agentprime.io/advisories/CVE-2026-15311/https://agentprime.io/advisories/CVE-2026-15311/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 23:45:10 GMTCVECVE-2026-14783: NousResearch hermes-agent skills_tool.py skill_view path traversalhttps://agentprime.io/advisories/CVE-2026-14783/https://agentprime.io/advisories/CVE-2026-14783/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 05 Jul 2026 23:45:10 GMTCVECVE-2026-14628: NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversalhttps://agentprime.io/advisories/CVE-2026-14628/https://agentprime.io/advisories/CVE-2026-14628/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 04 Jul 2026 13:00:08 GMTCVECVE-2026-14627: NousResearch hermes-agent Discord Platform Integration discord.py DiscordAdapter._is_allowed_user improper authenticationhttps://agentprime.io/advisories/CVE-2026-14627/https://agentprime.io/advisories/CVE-2026-14627/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 04 Jul 2026 12:45:06 GMTCVECVE-2026-14626: NousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation denial of servicehttps://agentprime.io/advisories/CVE-2026-14626/https://agentprime.io/advisories/CVE-2026-14626/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 04 Jul 2026 12:00:07 GMTCVECVE-2026-14625: NousResearch hermes-agent server.py shell.exec protection mechanismhttps://agentprime.io/advisories/CVE-2026-14625/https://agentprime.io/advisories/CVE-2026-14625/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 04 Jul 2026 11:30:07 GMTCVECVE-2026-14617: NousResearch hermes-agent Streaming Reasoning Tag Filter stream_consumer.py GatewayStreamConsumer._filter_and_accumulate case sensitivityhttps://agentprime.io/advisories/CVE-2026-14617/https://agentprime.io/advisories/CVE-2026-14617/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 21:45:10 GMTCVECVE-2026-11461: NousResearch hermes-agent resume Endpoint hermes_state.py resolve_session_by_title authorizationhttps://agentprime.io/advisories/CVE-2026-11461/https://agentprime.io/advisories/CVE-2026-11461/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 07 Jun 2026 21:45:09 GMTCVECVE-2026-10548: NousResearch hermes-agent Credential Pool Synchronization credential_pool.py _sync_anthropic_entry_from_credentials_file improper authenticationhttps://agentprime.io/advisories/CVE-2026-10548/https://agentprime.io/advisories/CVE-2026-10548/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 00:30:09 GMTCVECVE-2026-10220: NousResearch hermes-agent skills_tool.py skill_view injectionhttps://agentprime.io/advisories/CVE-2026-10220/https://agentprime.io/advisories/CVE-2026-10220/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 03:30:09 GMTCVECVE-2026-9367: NousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injectionhttps://agentprime.io/advisories/CVE-2026-9367/https://agentprime.io/advisories/CVE-2026-9367/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 24 May 2026 08:30:10 GMTCVECVE-2026-9354: NousResearch hermes-agent Slack Agent/Mattermost Agent escape outputhttps://agentprime.io/advisories/CVE-2026-9354/https://agentprime.io/advisories/CVE-2026-9354/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 24 May 2026 04:15:07 GMTCVECVE-2026-9352: NousResearch hermes-agent Messaging Gateway local.py _make_run_env information disclosurehttps://agentprime.io/advisories/CVE-2026-9352/https://agentprime.io/advisories/CVE-2026-9352/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 24 May 2026 03:30:11 GMTCVECVE-2026-9351: NousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversalhttps://agentprime.io/advisories/CVE-2026-9351/https://agentprime.io/advisories/CVE-2026-9351/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 24 May 2026 03:15:10 GMTCVECVE-2026-9350: NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorizationhttps://agentprime.io/advisories/CVE-2026-9350/https://agentprime.io/advisories/CVE-2026-9350/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 24 May 2026 02:45:10 GMTCVECVE-2026-7397: NousResearch hermes-agent file_tools.py _check_sensitive_path symlinkhttps://agentprime.io/advisories/CVE-2026-7397/https://agentprime.io/advisories/CVE-2026-7397/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Apr 2026 18:00:21 GMTCVECVE-2026-7396: NousResearch hermes-agent WeChat Work Platform Adapter wecom.py path traversalhttps://agentprime.io/advisories/CVE-2026-7396/https://agentprime.io/advisories/CVE-2026-7396/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Apr 2026 17:30:15 GMTCVECVE-2026-7113: NousResearch hermes-agent Webhooks Endpoint webhook.py missing authenticationhttps://agentprime.io/advisories/CVE-2026-7113/https://agentprime.io/advisories/CVE-2026-7113/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Apr 2026 10:00:17 GMTCVECVE-2026-7112: NousResearch hermes-agent API_SERVER_KEY api_server.py _check_auth improper authenticationhttps://agentprime.io/advisories/CVE-2026-7112/https://agentprime.io/advisories/CVE-2026-7112/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Apr 2026 09:45:11 GMTCVE