NousResearch vulnerabilities

Newest CVEs

• CVE-2026-71963

  Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection

  NousResearch · hermes-agent

  High8.6
• CVE-2026-85107

  NousResearch hermes-agent Electron Main Process main.ts resourceBufferFromUrl allocation of resources

  NousResearch · hermes-agent

  Medium5.3
• CVE-2026-85106

  NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgery

  NousResearch · hermes-agent

  Medium5.3
• CVE-2026-85105

  NousResearch hermes-agent Session Management s71.py _sess_nowait authorization

  NousResearch · hermes-agent

  Medium6.9
• CVE-2026-84289

  NousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocation

  NousResearch · hermes-agent

  Medium5.3
• CVE-2026-84288

  NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of service

  NousResearch · hermes-agent

  Medium5.3
• CVE-2026-84287

  NousResearch hermes-agent Session Chat api_server.py denial of service

  NousResearch · hermes-agent

  Medium5.3
• CVE-2026-82021

  Hermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch Reference

  NousResearch · hermes-agent

  Critical9.0
• CVE-2026-82020

  Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write Tool

  NousResearch · hermes-agent

  High7.6
• CVE-2026-18993

  NousResearch hermes-agent Memory Toolset model_tools.py access control

  NousResearch · hermes-agent

  Medium5.3