Is CVE-2026-10224 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-10224 being exploited in the wild.

How severe is CVE-2026-10224?

Medium severity, with a CVSS score of 5.3, published 1 June 2026.

Which products and versions are affected?

NousResearch Hermes Agent <= 0.19.0, <= 2026.4.30; hermes-agent (PyPI) ECOSYSTEM:introduced=0,last_affected=0.19.0.

Is there a fix for CVE-2026-10224?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-10224 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-10224?

Check whether you run NousResearch Hermes Agent or hermes-agent (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-10224: NousResearch hermes-agent denial of service in Feishu webhook handler

Q: Is there a fix for CVE-2026-10224?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-10224 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2026-10224?

Check whether you run NousResearch Hermes Agent or hermes-agent (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-10224 · Severity: medium · CVSS 5.3 · Published 2026-06-01

NousResearch hermes-agent is a library used for building AI agents and handling integrations. A flaw in its Feishu webhook handler allows unauthenticated remote attackers to trigger a denial-of-service condition. By sending a flood of invalid requests, an attacker can exhaust the system's rate limits, causing legitimate messages and automated workflows to be blocked or dropped.

Technologies: NousResearch Hermes Agent, hermes-agent (PyPI). Vendors: NousResearch, PyPI.

Quick answers

Is CVE-2026-10224 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-10224 being exploited in the wild.
How severe is CVE-2026-10224?: Medium severity, with a CVSS score of 5.3, published 1 June 2026.
Which products and versions are affected?: NousResearch Hermes Agent <= 0.19.0, <= 2026.4.30; hermes-agent (PyPI) ECOSYSTEM:introduced=0,last_affected=0.19.0.
Is there a fix for CVE-2026-10224?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-10224 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-10224?: Check whether you run NousResearch Hermes Agent or hermes-agent (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An uncontrolled resource consumption vulnerability (CWE-400) exists in the `_handle_webhook_request` function within `gateway/platforms/feishu.py` of the NousResearch hermes-agent. The root cause is a logic flaw where rate limiting is applied to incoming Feishu webhook requests before the system validates the request's verification token or cryptographic signature. A remote, unauthenticated attacker can exploit this by sending a high volume of malformed or unsigned requests. Because these invalid requests increment the shared rate-limit bucket, legitimate traffic from the same source (or sharing the same rate-limit key) will be rejected with HTTP 429 (Too Many Requests) errors. As of the advisory date, no official patch has been released by the vendor.

Affected products

NousResearch hermes-agent <= 0.19.0

Identifiers

CVE-2026-10224
GHSA-pmqc-57g8-c22c
PYSEC-2026-3576

Timeline

2026-05-07: disclosed: Initial researcher disclosure via GitHub Gist
2026-06-01: advisory: Published to GitHub Advisory Database and NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.