CVEs we hold for Nousresearch

Records whose assigning authority named Nousresearch as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-9369NousResearch hermes-agent CLI web-dashboard web_server.py _discover_dashboard_plugins comparisonNousResearch hermes-agent

CVE-2026-9368NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandboxNousResearch hermes-agent

CVE-2026-9367NousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injectionNousResearch hermes-agent

CVE-2026-9366NousResearch hermes-agent prompt_builder.py _scan_context_content injectionNousResearch hermes-agent

CVE-2026-9354NousResearch hermes-agent Slack Agent/Mattermost Agent escape outputNousResearch hermes-agent

CVE-2026-9353NousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injectionNousResearch hermes-agent

CVE-2026-9352NousResearch hermes-agent Messaging Gateway local.py _make_run_env information disclosureNousResearch hermes-agent

CVE-2026-9351NousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversalNousResearch hermes-agent

CVE-2026-9350NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorizationNousResearch hermes-agent

CVE-2026-85107NousResearch hermes-agent Electron Main Process main.ts resourceBufferFromUrl allocation of resourcesNousResearch hermes-agent

CVE-2026-85106NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgeryNousResearch hermes-agent

CVE-2026-85105NousResearch hermes-agent Session Management s71.py _sess_nowait authorizationNousResearch hermes-agent

CVE-2026-84289NousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocationNousResearch hermes-agent

CVE-2026-84288NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of serviceNousResearch hermes-agent

CVE-2026-84287NousResearch hermes-agent Session Chat api_server.py denial of serviceNousResearch hermes-agent

CVE-2026-82021Hermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch ReferenceNousResearch hermes-agent

CVE-2026-82020Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write ToolNousResearch hermes-agent

CVE-2026-7397NousResearch hermes-agent file_tools.py _check_sensitive_path symlinkNousResearch hermes-agent

CVE-2026-7396NousResearch hermes-agent WeChat Work Platform Adapter wecom.py path traversalNousResearch hermes-agent

CVE-2026-71963Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config InjectionNousResearch hermes-agent

CVE-2026-7113NousResearch hermes-agent Webhooks Endpoint webhook.py missing authenticationNousResearch hermes-agent

CVE-2026-7112NousResearch hermes-agent API_SERVER_KEY api_server.py _check_auth improper authenticationNousResearch hermes-agent

CVE-2026-53870Hermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store FilesNousResearch hermes-agent

CVE-2026-53869Hermes Agent < 0.16.0 - DNS Rebinding Bypass via WebSocket EndpointsNousResearch hermes-agent

CVE-2026-18993NousResearch hermes-agent Memory Toolset model_tools.py access controlNousResearch hermes-agent

CVE-2026-18976NousResearch hermes-agent disabled_toolsets agent_init.py get_tool_definitions privileges assignmentNousResearch hermes-agent

CVE-2026-18775NousResearch hermes-agent Browser Tooling browser_tool.py browser_snapshot server-side request forgeryNousResearch hermes-agent

CVE-2026-18774NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgeryNousResearch hermes-agent

CVE-2026-18773NousResearch hermes-agent Quick run.py _check_slash_access authorizationNousResearch hermes-agent

CVE-2026-17432NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access controlNousResearch hermes-agent

CVE-2026-15311NousResearch hermes-agent Matrix Adapter matrix.py MatrixAdapter._markdown_to_html cross site scriptingNousResearch hermes-agent

CVE-2026-14783NousResearch hermes-agent skills_tool.py skill_view path traversalNousResearch hermes-agent

CVE-2026-14628NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversalNousResearch hermes-agent

CVE-2026-14627NousResearch hermes-agent Discord Platform Integration discord.py DiscordAdapter._is_allowed_user improper…NousResearch hermes-agent

CVE-2026-14626NousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation denial of serviceNousResearch hermes-agent

CVE-2026-14625NousResearch hermes-agent server.py shell.exec protection mechanismNousResearch hermes-agent

CVE-2026-14617NousResearch hermes-agent Streaming Reasoning Tag Filter stream_consumer.py…NousResearch hermes-agent

CVE-2026-11461NousResearch hermes-agent resume Endpoint hermes_state.py resolve_session_by_title authorizationNousResearch hermes-agent

CVE-2026-10548NousResearch hermes-agent Credential Pool Synchronization credential_pool.py…NousResearch hermes-agent

CVE-2026-10224NousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource consumptionNousResearch hermes-agent

CVE-2026-10223NousResearch hermes-agent memory_tool.py _scan_memory_content injectionNousResearch hermes-agent

CVE-2026-10222NousResearch hermes-agent config.py _sanitize_env_lines injectionNousResearch hermes-agent

CVE-2026-10221NousResearch hermes-agent run_agent.py _compress_context injectionNousResearch hermes-agent

CVE-2026-10220NousResearch hermes-agent skills_tool.py skill_view injectionNousResearch hermes-agent

44 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.