NousResearch hermes-agent

9 known vulnerabilities in NousResearch hermes-agent, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-71963 CVSS 8.6 high Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to…
  • CVE-2026-85107 CVSS 5.3 medium A vulnerability was found in NousResearch hermes-agent 0.18.0. This vulnerability affects the function resourceBufferFromUrl of the file…
  • CVE-2026-85106 CVSS 5.3 medium A vulnerability has been found in NousResearch hermes-agent 0.18.0. This affects the function fetchLinkTitle of the file…
  • CVE-2026-85105 CVSS 6.9 medium A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function _sess_nowait of the file s71.py of the…
  • CVE-2026-84289 CVSS 2.1 low A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function list_tools of the file…
  • CVE-2026-84288 CVSS 2.1 low A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.prompt of the file…
  • CVE-2026-84287 CVSS 2.1 low A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file…
  • CVE-2026-82021 CVSS 9.0 critical Hermes Agent 0.18.2 prior to 0.19.0 contains a supply chain vulnerability in its bundled MCP catalog that allows a remote attacker to…
  • CVE-2026-82020 CVSS 7.6 high Hermes Agent 0.16.0 prior to 0.17.0 contains an improper path restriction vulnerability that allows attackers who can influence ingested…