Executive brief
NousResearch hermes-agent is a desktop application that fetches and displays web page titles. A vulnerability in the link title fetching function allows an attacker to manipulate the URL parameter, potentially causing the application to make unintended server requests to arbitrary internal or external systems. This could enable an attacker to access sensitive internal services, bypass network restrictions, or launch attacks against other systems on the network.
Technical details
The vulnerability is a server-side request forgery (SSRF) flaw in the fetchLinkTitle function within apps/desktop/src/app/artifacts/index.tsx. The vulnerable component fails to properly validate or sanitize the url argument before using it to fetch link titles, allowing an attacker to inject arbitrary URLs. The attack is remotely exploitable without authentication required. An attacker can craft a malicious URL to cause the application to make HTTP requests to unintended destinations, potentially accessing internal services, metadata endpoints, or launching further attacks. The vendor was contacted but has not responded with a fix as of the advisory date.
Affected products
- NousResearch hermes-agent 0.18.0
Timeline
- 2026-09-03: disclosed: Public disclosure via NVD
- 2026-09-03: other: Vendor contacted early but did not respond