Quick answers
- Is CVE-2026-14625 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-14625 being exploited in the wild.
- How severe is CVE-2026-14625?
- Medium severity, with a CVSS score of 6.3, published 4 July 2026.
- Which products and versions are affected?
- NousResearch Hermes Agent up to 0.15.2.
- Is there a fix for CVE-2026-14625?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-14625 attacked?
- It is attacked over the network or with local access, in a software library.
- Am I affected by CVE-2026-14625?
- Check whether you run NousResearch Hermes Agent at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A protection mechanism failure (CWE-693) exists in the hermes-agent gateway layer, specifically within the shell.exec JSON-RPC method and the command.dispatch function for Quick Commands. While the core LLM execution loop uses the Tirith scanner via check_all_command_guards(), these gateway paths invoke native subshells (subprocess.run and asyncio.create_subprocess_shell) directly. An attacker with access to the TUI JSON-RPC interface or the ability to trigger configured quick commands can bypass security filters to achieve Remote Code Execution (RCE). The vulnerability affects versions up to 0.15.2 and remains unpatched as the vendor did not respond to disclosure.
Affected products
- NousResearch hermes-agent up to 0.15.2
Timeline
- 2026-06-01: disclosed: Initial discovery and Gist publication by researcher YLChen-007
- 2026-07-04: advisory: CVE-2026-14625 published via NVD/VulDB