Is CVE-2026-11322 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-11322 being exploited in the wild.

How severe is CVE-2026-11322?

Medium severity, with a CVSS score of 6.5, published 4 June 2026.

Which products and versions are affected?

nesquena Hermes WebUI < v0.51.221.

Is there a fix for CVE-2026-11322?

A patch was published on 2026-06-02: Fix merged in pull request 3398 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-11322 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-11322?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-11322: Hermes WebUI path traversal via symlink in workspace APIs

Q: Is there a fix for CVE-2026-11322?

A patch was published on 2026-06-02: Fix merged in pull request 3398 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-11322 attacked?

It is attacked over the network, in a network appliance.

Q: Am I affected by CVE-2026-11322?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-11322 · Severity: medium · CVSS 6.5 · Published 2026-06-04

Hermes WebUI is a management interface used to interact with workspaces and files. A security flaw allows an attacker to use specially crafted symbolic links (symlinks) to bypass folder restrictions and access files anywhere on the host server. This could lead to the theft of sensitive information such as SSH keys, cloud credentials, and application tokens, potentially compromising the entire server infrastructure.

Quick answers

Is CVE-2026-11322 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-11322 being exploited in the wild.
How severe is CVE-2026-11322?: Medium severity, with a CVSS score of 6.5, published 4 June 2026.
Which products and versions are affected?: nesquena Hermes WebUI < v0.51.221.
Is there a fix for CVE-2026-11322?: A patch was published on 2026-06-02: Fix merged in pull request 3398 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-11322 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-11322?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A path traversal vulnerability exists in Hermes WebUI's workspace file and listing APIs due to improper link resolution (CWE-59). The 'safe_resolve_ws' function failed to verify that a resolved symlink target remained within the designated workspace root, relying instead on a limited system-directory denylist. An authenticated attacker can create or provide a workspace containing symlinks pointing to sensitive host locations (e.g., ~/.ssh). When these paths are accessed via the WebUI or LLM agent tool calls, the server discloses the contents of the external files. Additionally, a TOCTOU (Time-of-Check to Time-of-Use) race condition was identified where a symlink could be swapped after validation but before file access. The issue is fixed in v0.51.221 by implementing anchored file operations and strict path containment checks.

Affected products

nesquena Hermes WebUI < v0.51.221

Timeline

2026-06-02: patched: Fix merged in pull request 3398
2026-06-04: advisory: NVD and VulnCheck published advisory details

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.