# CVE-2026-10224: NousResearch hermes-agent denial of service in Feishu webhook handler

Source: https://junglewise.ai/threats/cve-2026-10224-nousresearch-hermes-agent-denial-of-service-in-feishu-webhook  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-01. Updated: 2026-07-28  
License: CC BY 4.0 with a link back

CVE-2026-10224 · Severity: medium · CVSS 5.3 · Published 2026-06-01

NousResearch hermes-agent is a library used for building AI agents and handling integrations. A flaw in its Feishu webhook handler allows unauthenticated remote attackers to trigger a denial-of-service condition. By sending a flood of invalid requests, an attacker can exhaust the system's rate limits, causing legitimate messages and automated workflows to be blocked or dropped.

Technologies: [NousResearch Hermes Agent](https://junglewise.ai/threats/technologies/hermes-agent), [hermes-agent (PyPI)](https://junglewise.ai/threats/technologies/pypi-hermes-agent). Vendors: [NousResearch](https://junglewise.ai/threats/vendors/nousresearch), [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-10224 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-10224 being exploited in the wild.

**How severe is CVE-2026-10224?** Medium severity, with a CVSS score of 5.3, published 1 June 2026.

**Which products and versions are affected?** NousResearch Hermes Agent <= 0.19.0, <= 2026.4.30; hermes-agent (PyPI) ECOSYSTEM:introduced=0,last_affected=0.19.0.

**Is there a fix for CVE-2026-10224?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-10224 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-10224?** Check whether you run NousResearch Hermes Agent or hermes-agent (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An uncontrolled resource consumption vulnerability (CWE-400) exists in the `_handle_webhook_request` function within `gateway/platforms/feishu.py` of the NousResearch hermes-agent. The root cause is a logic flaw where rate limiting is applied to incoming Feishu webhook requests before the system validates the request's verification token or cryptographic signature. A remote, unauthenticated attacker can exploit this by sending a high volume of malformed or unsigned requests. Because these invalid requests increment the shared rate-limit bucket, legitimate traffic from the same source (or sharing the same rate-limit key) will be rejected with HTTP 429 (Too Many Requests) errors. As of the advisory date, no official patch has been released by the vendor.

## Affected products

- NousResearch hermes-agent <= 0.19.0

## Identifiers

- CVE-2026-10224
- GHSA-pmqc-57g8-c22c
- PYSEC-2026-3576

## Timeline

- 2026-05-07: disclosed: Initial researcher disclosure via GitHub Gist
- 2026-06-01: advisory: Published to GitHub Advisory Database and NVD

## References

- [https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87](https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87)
- [https://vuldb.com/cve/CVE-2026-10224](https://vuldb.com/cve/CVE-2026-10224)
- [https://vuldb.com/submit/822022](https://vuldb.com/submit/822022)
- [https://vuldb.com/vuln/367503](https://vuldb.com/vuln/367503)
- [https://vuldb.com/vuln/367503/cti](https://vuldb.com/vuln/367503/cti)

## Related threats

- [NousResearch hermes-agent resource exhaustion in resourceBufferFromUrl](https://junglewise.ai/threats/cve-2026-85107-nousresearch-hermes-agent-resource-exhaustion-in)
- [NousResearch hermes-agent server-side request forgery in Link Title Fetch](https://junglewise.ai/threats/cve-2026-85106-nousresearch-hermes-agent-server-side-request-forgery-in-link)
- [NousResearch hermes-agent authorization bypass in Session Management](https://junglewise.ai/threats/cve-2026-85105-nousresearch-hermes-agent-authorization-bypass-in-session)
- [NousResearch hermes-agent denial of service in MCP Tool](https://junglewise.ai/threats/cve-2026-84289-nousresearch-hermes-agent-denial-of-service-in-mcp-tool)
- [NousResearch hermes-agent denial of service in ACP Prompt Workflow](https://junglewise.ai/threats/cve-2026-84288-nousresearch-hermes-agent-denial-of-service-in-acp-prompt)