| Component | Hermes Agent |
| Severity | medium (CVSS 4.4) |
| CVSS vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L |
| Published (NVD) | 2026-04-29 |
| Affected versions | < 0.9.0 read from the advisory text: NVD has not published CPE data yet |
| Fixed in | 0.9.0 |
| Weakness | CWE-59CWE-61 |
| CISA KEV | not listed |
NVD description
A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function _check_sensitive_path of the file tools/file_tools.py. The manipulation results in symlink following. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.9.0 is able to mitigate this issue. The patch is identified as 311dac197145e19e07df68feba2cd55d896a3cd1. Upgrading the affected component is recommended.
What to do
- Upgrade Hermes Agent to
0.9.0or later. - Do not expose the component's API or UI to the internet without authentication in front of it.
Sources
- NVD: CVE-2026-7397
- https://github.com/NousResearch/hermes-agent/
- https://github.com/NousResearch/hermes-agent/commit/311dac197145e19e07df68feba2cd55d896a3cd1
- https://github.com/NousResearch/hermes-agent/issues/8734
- https://github.com/NousResearch/hermes-agent/pull/8829
- https://github.com/NousResearch/hermes-agent/releases/tag/v2026.4.13
- https://vuldb.com/submit/803270
- https://vuldb.com/vuln/360121
- https://vuldb.com/vuln/360121/cti
Other Hermes Agent CVEs
9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allow...
A vulnerability has been found in NousResearch hermes-agent 0.18.0. This affects the function fetchLinkTitle of the file apps/desktop/src/ap...
Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to execute...
A vulnerability was found in NousResearch hermes-agent 0.18.0. This vulnerability affects the function resourceBufferFromUrl of the file app...
A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function _sess_nowait of the file s71.py of the com...
A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.prompt of the file acp_ad...