Priority HIGH 72
Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to execute arbitrary OS commands by supplying a malicious repository with a crafted .git/c…
CVSS 4.0HIGH 8.6· Network · No auth · User interaction · EPSS 0.00858 · Published 2026-09-03 · Fixed CWE-78
Priority HIGH 70
A vulnerability was detected in NousResearch hermes-agent up to 2026.5.16.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00767 · Published 2026-07-04 · No fix listed CWE-22
Priority HIGH 70
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00372 · Published 2026-06-01 · No fix listed CWE-400
Priority HIGH 70
A vulnerability was identified in NousResearch hermes-agent up to 0.12.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00304 · Published 2026-06-01 · No fix listed CWE-707
Priority HIGH 70
A vulnerability was determined in NousResearch hermes-agent up to 2026.4.30.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00304 · Published 2026-06-01 · No fix listed CWE-707
Priority HIGH 70
A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0038 · Published 2026-05-24 · Fixed in 0.11.0 CWE-264
Priority HIGH 70
A vulnerability was determined in NousResearch hermes-agent up to 5157f5427f19488b31c6fdebbacd15d798ce7f63.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.02724 · Published 2026-05-24 · No fix listed CWE-77
Priority HIGH 70
A vulnerability was found in NousResearch hermes-agent 2026.4.23.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00305 · Published 2026-05-24 · Fixed in 0.15.0 CWE-707
Priority HIGH 70
A vulnerability was detected in NousResearch hermes-agent up to 2026.4.16.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00336 · Published 2026-05-24 · No fix listed CWE-116
Priority HIGH 70
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.23.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00305 · Published 2026-05-24 · Fixed in 0.15.0 CWE-707
Priority HIGH 70
A weakness has been identified in NousResearch hermes-agent up to 2026.4.23.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00286 · Published 2026-05-24 · No fix listed CWE-200
Priority HIGH 70
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.16.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00676 · Published 2026-05-24 · No fix listed CWE-22
Priority HIGH 68
The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{delivery_id} and re-derives the authorizing route by splitting that string, so a route name containi…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00691 · Published 2026-10-21 · No fix listed CWE-863
Priority MEDIUM 64
A vulnerability was identified in NousResearch hermes-agent 0.8.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00479 · Published 2026-04-29 · No fix listed CWE-22
Priority MEDIUM 63
Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users.
CVSS 4.0MEDIUM 6.8· Local · Low privileges · No interaction · EPSS 0.0016 · Published 2026-06-17 · Fixed in 0.16.0 CWE-276
Priority MEDIUM 61
A security vulnerability has been detected in NousResearch hermes-agent up to 0.15.2.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00554 · Published 2026-07-04 · No fix listed CWE-287
Priority MEDIUM 61
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00267 · Published 2026-06-01 · Fixed in 0.18.0 CWE-707
Priority MEDIUM 61
A vulnerability was found in NousResearch hermes-agent 0.8.0.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00362 · Published 2026-04-27 · No fix listed CWE-287
Priority MEDIUM 61
A vulnerability has been found in NousResearch hermes-agent 0.8.0.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.0036 · Published 2026-04-27 · No fix listed CWE-287
Priority MEDIUM 57
A vulnerability was found in NousResearch hermes-agent up to 0.18.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00471 · Published 2026-09-01 · No fix listed CWE-400
Priority MEDIUM 57
A vulnerability has been found in NousResearch hermes-agent up to 0.18.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00471 · Published 2026-09-01 · No fix listed CWE-404
Priority MEDIUM 57
A flaw has been found in NousResearch hermes-agent 0.18.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00521 · Published 2026-09-01 · No fix listed CWE-404
Priority MEDIUM 57
A vulnerability was detected in NousResearch hermes-agent up to 0.16.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00374 · Published 2026-08-06 · No fix listed CWE-266
Priority MEDIUM 57
A vulnerability was determined in NousResearch hermes-agent up to 0.16.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00366 · Published 2026-08-06 · No fix listed CWE-266
Priority MEDIUM 57
A vulnerability has been found in NousResearch hermes-agent up to 0.16.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00378 · Published 2026-08-04 · No fix listed CWE-918
Load more
THREATIST.IORead the docs