# CVE-2026-14627: NousResearch hermes-agent improper authentication in Discord integration

Source: https://junglewise.ai/threats/cve-2026-14627-nousresearch-hermes-agent-improper-authentication-in-discord  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-04. Updated: 2026-07-04  
License: CC BY 4.0 with a link back

CVE-2026-14627 · Severity: medium · CVSS 5.6 · Published 2026-07-04

NousResearch hermes-agent is an AI agent framework that can integrate with platforms like Discord. A security flaw in its Discord integration allows unauthorized users to bypass authentication and gain full access to the agent's tools and data. This occurs if an attacker shares any other Discord server with the bot and possesses a role ID that matches the bot's restricted access configuration. An attacker could use this to execute commands, extract memory, or compromise connected infrastructure via direct messages.

Technologies: [NousResearch Hermes Agent](https://junglewise.ai/threats/technologies/hermes-agent). Vendors: [NousResearch](https://junglewise.ai/threats/vendors/nousresearch).

## Quick answers

**Is CVE-2026-14627 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-14627 being exploited in the wild.

**How severe is CVE-2026-14627?** Medium severity, with a CVSS score of 5.6, published 4 July 2026.

**Which products and versions are affected?** NousResearch Hermes Agent <= 0.15.2.

**Is there a fix for CVE-2026-14627?** A patch was published on 2026-05-07: Remediated in commit ef1e56557 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-14627 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-14627?** Check whether you run NousResearch Hermes Agent at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An improper authentication vulnerability (CWE-287) exists in the `DiscordAdapter._is_allowed_user` function within `gateway/platforms/discord.py`. The vulnerability is caused by an insecure fallback mechanism that scans all mutual guilds shared between the bot and a user when `DISCORD_ALLOWED_ROLES` is configured. If a user interacts with the bot via Direct Message (DM), the bot iterates through all servers it belongs to; if the user has a role ID in any of those servers that matches an entry in `DISCORD_ALLOWED_ROLES`, access is granted. This allows an attacker to bypass authentication by obtaining a matching role ID in a secondary, non-restricted server that the bot also inhabits. The vulnerability was reportedly remediated in commit `ef1e56557` by scoping role checks to the originating guild.

## Affected products

- NousResearch hermes-agent <= 0.15.2

## Timeline

- 2026-05-07: patched: Remediated in commit ef1e56557
- 2026-06-01: disclosed: Public disclosure via GitHub Gist
- 2026-07-04: advisory: NVD/VulDB publication

## References

- [https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb](https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb)
- [https://vuldb.com/cve/CVE-2026-14627](https://vuldb.com/cve/CVE-2026-14627)
- [https://vuldb.com/submit/845598](https://vuldb.com/submit/845598)
- [https://vuldb.com/vuln/376143](https://vuldb.com/vuln/376143)
- [https://vuldb.com/vuln/376143/cti](https://vuldb.com/vuln/376143/cti)

## Related threats

- [NousResearch hermes-agent resource exhaustion in resourceBufferFromUrl](https://junglewise.ai/threats/cve-2026-85107-nousresearch-hermes-agent-resource-exhaustion-in)
- [NousResearch hermes-agent server-side request forgery in Link Title Fetch](https://junglewise.ai/threats/cve-2026-85106-nousresearch-hermes-agent-server-side-request-forgery-in-link)
- [NousResearch hermes-agent authorization bypass in Session Management](https://junglewise.ai/threats/cve-2026-85105-nousresearch-hermes-agent-authorization-bypass-in-session)
- [NousResearch hermes-agent denial of service in MCP Tool](https://junglewise.ai/threats/cve-2026-84289-nousresearch-hermes-agent-denial-of-service-in-mcp-tool)
- [NousResearch hermes-agent denial of service in ACP Prompt Workflow](https://junglewise.ai/threats/cve-2026-84288-nousresearch-hermes-agent-denial-of-service-in-acp-prompt)