{"schema_version":1,"title":"NousResearch Hermes Agent vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 38 vulnerabilities in NousResearch Hermes Agent: 0 in the last 7 days and 20 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-71963, was published on 3 September 2026.","url":"https://junglewise.ai/threats/technologies/hermes-agent","json_url":"https://junglewise.ai/threats/technologies/hermes-agent.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/hermes-agent","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":11,"all_time":38,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":9,"last_90_days":20,"last_365_days":38},"latest":[{"cve":"CVE-2026-71963","cvss":8.8,"epss":0.0086,"slug":"cve-2026-71963-nous-research-hermes-agent-remote-code-execution-in-git-config","title":"Nous Research Hermes Agent remote code execution in git config","severity":"high","exploited":false,"published_at":"2026-09-03T16:18:21.71+00:00","url":"https://junglewise.ai/threats/cve-2026-71963-nous-research-hermes-agent-remote-code-execution-in-git-config"},{"cve":"CVE-2026-85107","cvss":4.3,"epss":0.0051,"slug":"cve-2026-85107-nousresearch-hermes-agent-resource-exhaustion-in","title":"NousResearch hermes-agent resource exhaustion in resourceBufferFromUrl","severity":"medium","exploited":false,"published_at":"2026-09-03T13:06:21.603+00:00","url":"https://junglewise.ai/threats/cve-2026-85107-nousresearch-hermes-agent-resource-exhaustion-in"},{"cve":"CVE-2026-85106","cvss":6.3,"epss":0.0035,"slug":"cve-2026-85106-nousresearch-hermes-agent-server-side-request-forgery-in-link","title":"NousResearch hermes-agent server-side request forgery in Link Title Fetch","severity":"medium","exploited":false,"published_at":"2026-09-03T13:06:21.437+00:00","url":"https://junglewise.ai/threats/cve-2026-85106-nousresearch-hermes-agent-server-side-request-forgery-in-link"},{"cve":"CVE-2026-85105","cvss":7.3,"epss":0.005,"slug":"cve-2026-85105-nousresearch-hermes-agent-authorization-bypass-in-session","title":"NousResearch hermes-agent authorization bypass in Session Management","severity":"high","exploited":false,"published_at":"2026-09-03T13:06:21.25+00:00","url":"https://junglewise.ai/threats/cve-2026-85105-nousresearch-hermes-agent-authorization-bypass-in-session"},{"cve":"CVE-2026-84289","cvss":4.3,"epss":0.0047,"slug":"cve-2026-84289-nousresearch-hermes-agent-denial-of-service-in-mcp-tool","title":"NousResearch hermes-agent denial of service in MCP Tool","severity":"medium","exploited":false,"published_at":"2026-09-01T22:17:18.813+00:00","url":"https://junglewise.ai/threats/cve-2026-84289-nousresearch-hermes-agent-denial-of-service-in-mcp-tool"},{"cve":"CVE-2026-84288","cvss":4.3,"epss":0.0047,"slug":"cve-2026-84288-nousresearch-hermes-agent-denial-of-service-in-acp-prompt","title":"NousResearch hermes-agent denial of service in ACP Prompt Workflow","severity":"medium","exploited":false,"published_at":"2026-09-01T22:17:18.647+00:00","url":"https://junglewise.ai/threats/cve-2026-84288-nousresearch-hermes-agent-denial-of-service-in-acp-prompt"},{"cve":"CVE-2026-84287","cvss":4.3,"epss":0.0052,"slug":"cve-2026-84287-nousresearch-hermes-agent-denial-of-service-in-session-chat","title":"NousResearch hermes-agent denial of service in session chat","severity":"medium","exploited":false,"published_at":"2026-09-01T21:18:46.567+00:00","url":"https://junglewise.ai/threats/cve-2026-84287-nousresearch-hermes-agent-denial-of-service-in-session-chat"},{"cve":"CVE-2026-82021","cvss":8.3,"epss":0.0034,"slug":"cve-2026-82021-nous-research-hermes-agent-supply-chain-vulnerability-in-mcp","title":"Nous Research Hermes Agent supply chain vulnerability in MCP catalog","severity":"high","exploited":false,"published_at":"2026-08-28T20:20:14.47+00:00","url":"https://junglewise.ai/threats/cve-2026-82021-nous-research-hermes-agent-supply-chain-vulnerability-in-mcp"},{"cve":"CVE-2026-82020","cvss":6.8,"epss":0.0044,"slug":"cve-2026-82020-hermes-agent-improper-path-restriction-in-file-write-tooling","title":"Hermes Agent improper path restriction in file-write tooling","severity":"medium","exploited":false,"published_at":"2026-08-28T20:20:14.323+00:00","url":"https://junglewise.ai/threats/cve-2026-82020-hermes-agent-improper-path-restriction-in-file-write-tooling"},{"cve":"CVE-2026-18775","cvss":6.3,"epss":0.0038,"slug":"cve-2026-18775-nousresearch-hermes-agent-ssrf-in-browser-tooling","title":"NousResearch hermes-agent SSRF in browser tooling","severity":"medium","exploited":false,"published_at":"2026-08-04T17:16:48.287+00:00","url":"https://junglewise.ai/threats/cve-2026-18775-nousresearch-hermes-agent-ssrf-in-browser-tooling"},{"cve":"CVE-2026-18774","cvss":6.3,"epss":0.0035,"slug":"cve-2026-18774-nousresearch-hermes-agent-server-side-request-forgery-in-image","title":"NousResearch hermes-agent server-side request forgery in image provider","severity":"medium","exploited":false,"published_at":"2026-08-04T17:16:48.127+00:00","url":"https://junglewise.ai/threats/cve-2026-18774-nousresearch-hermes-agent-server-side-request-forgery-in-image"},{"cve":"CVE-2026-18773","cvss":6.3,"epss":0.0035,"slug":"cve-2026-18773-nousresearch-hermes-agent-authorization-bypass-in-slash-commands","title":"NousResearch hermes-agent authorization bypass in slash commands","severity":"medium","exploited":false,"published_at":"2026-08-04T16:16:22.47+00:00","url":"https://junglewise.ai/threats/cve-2026-18773-nousresearch-hermes-agent-authorization-bypass-in-slash-commands"},{"cve":"CVE-2026-17432","cvss":5,"slug":"cve-2026-17432-nousresearch-hermes-agent-authorization-bypass-in-simplex-gateway","title":"NousResearch hermes-agent authorization bypass in SimpleX Gateway","severity":"medium","exploited":false,"published_at":"2026-07-26T01:16:25.783+00:00","url":"https://junglewise.ai/threats/cve-2026-17432-nousresearch-hermes-agent-authorization-bypass-in-simplex-gateway"},{"cve":"CVE-2026-15311","cvss":3.5,"slug":"cve-2026-15311-nousresearch-hermes-agent-xss-in-matrix-adapter","title":"NousResearch hermes-agent XSS in Matrix Adapter","severity":"low","exploited":false,"published_at":"2026-07-10T00:16:32.853+00:00","url":"https://junglewise.ai/threats/cve-2026-15311-nousresearch-hermes-agent-xss-in-matrix-adapter"},{"cve":"CVE-2026-14783","cvss":4.3,"slug":"cve-2026-14783-nousresearch-hermes-agent-path-traversal-in-skill-view","title":"NousResearch hermes-agent path traversal in skill_view","severity":"medium","exploited":false,"published_at":"2026-07-06T00:16:55.037+00:00","url":"https://junglewise.ai/threats/cve-2026-14783-nousresearch-hermes-agent-path-traversal-in-skill-view"},{"cve":"CVE-2026-14628","cvss":5.3,"slug":"cve-2026-14628-nousresearch-hermes-agent-path-traversal-in-live-webhook-endpoint","title":"NousResearch hermes-agent path traversal in Live Webhook Endpoint","severity":"medium","exploited":false,"published_at":"2026-07-04T13:16:30.413+00:00","url":"https://junglewise.ai/threats/cve-2026-14628-nousresearch-hermes-agent-path-traversal-in-live-webhook-endpoint"},{"cve":"CVE-2026-14627","cvss":5.6,"slug":"cve-2026-14627-nousresearch-hermes-agent-improper-authentication-in-discord","title":"NousResearch hermes-agent improper authentication in Discord integration","severity":"medium","exploited":false,"published_at":"2026-07-04T13:16:30.23+00:00","url":"https://junglewise.ai/threats/cve-2026-14627-nousresearch-hermes-agent-improper-authentication-in-discord"},{"cve":"CVE-2026-14626","cvss":4.3,"slug":"cve-2026-14626-nousresearch-hermes-agent-denial-of-service-in-aiagent-run","title":"NousResearch hermes-agent denial of service in AIAgent.run_conversation","severity":"medium","exploited":false,"published_at":"2026-07-04T12:16:53.903+00:00","url":"https://junglewise.ai/threats/cve-2026-14626-nousresearch-hermes-agent-denial-of-service-in-aiagent-run"},{"cve":"CVE-2026-14625","cvss":6.3,"slug":"cve-2026-14625-nousresearch-hermes-agent-security-scanner-bypass-in-gateway","title":"NousResearch hermes-agent security scanner bypass in gateway shell execution","severity":"medium","exploited":false,"published_at":"2026-07-04T12:16:53.74+00:00","url":"https://junglewise.ai/threats/cve-2026-14625-nousresearch-hermes-agent-security-scanner-bypass-in-gateway"},{"cve":"CVE-2026-14617","cvss":3.1,"slug":"cve-2026-14617-nousresearch-hermes-agent-information-disclosure-via-case","title":"NousResearch hermes-agent information disclosure via case-sensitive tag matching","severity":"low","exploited":false,"published_at":"2026-07-03T22:16:52.943+00:00","url":"https://junglewise.ai/threats/cve-2026-14617-nousresearch-hermes-agent-information-disclosure-via-case"},{"cve":"CVE-2026-53870","cvss":5.5,"epss":0.0015,"slug":"cve-2026-53870-nousresearch-hermes-agent-sensitive-information-disclosure-via","title":"NousResearch Hermes Agent sensitive information disclosure via world-readable files","severity":"medium","exploited":false,"published_at":"2026-06-17T19:18:10.883+00:00","url":"https://junglewise.ai/threats/cve-2026-53870-nousresearch-hermes-agent-sensitive-information-disclosure-via"},{"cve":"CVE-2026-53869","cvss":7.5,"epss":0.0081,"slug":"cve-2026-53869-nousresearch-hermes-agent-dns-rebinding-in-websocket-endpoints","title":"NousResearch Hermes Agent DNS rebinding in WebSocket endpoints","severity":"high","exploited":false,"published_at":"2026-06-17T19:18:10.743+00:00","url":"https://junglewise.ai/threats/cve-2026-53869-nousresearch-hermes-agent-dns-rebinding-in-websocket-endpoints"},{"cve":"CVE-2026-11461","cvss":6.3,"slug":"cve-2026-11461-nousresearch-hermes-agent-authorization-bypass-in-resolve-session","title":"NousResearch hermes-agent authorization bypass in resolve_session_by_title","severity":"medium","exploited":false,"published_at":"2026-06-07T22:16:22.547+00:00","url":"https://junglewise.ai/threats/cve-2026-11461-nousresearch-hermes-agent-authorization-bypass-in-resolve-session"},{"cve":"CVE-2026-10548","cvss":5.3,"slug":"cve-2026-10548-nousresearch-hermes-agent-improper-authentication-in-credential","title":"NousResearch hermes-agent improper authentication in Credential Pool","severity":"medium","exploited":false,"published_at":"2026-06-02T02:16:15.233+00:00","url":"https://junglewise.ai/threats/cve-2026-10548-nousresearch-hermes-agent-improper-authentication-in-credential"},{"cve":"CVE-2026-10224","cvss":5.3,"epss":0.0037,"slug":"cve-2026-10224-nousresearch-hermes-agent-denial-of-service-in-feishu-webhook","title":"NousResearch hermes-agent denial of service in Feishu webhook handler","severity":"medium","exploited":false,"published_at":"2026-06-01T06:16:38.657+00:00","url":"https://junglewise.ai/threats/cve-2026-10224-nousresearch-hermes-agent-denial-of-service-in-feishu-webhook"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":7},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"NousResearch Hermes Agent","slug":"hermes-agent","vendor":{"name":"NousResearch","slug":"nousresearch","url":"https://junglewise.ai/threats/vendors/nousresearch"},"aliases":[],"category":"library","homepage":"https://nousresearch.com/","repo_url":"https://github.com/NousResearch/hermes-agent","description":"An open-source agentic framework designed for building and deploying AI agents using the Hermes family of models.","url":"https://junglewise.ai/threats/technologies/hermes-agent"},"most_severe":[{"cve":"CVE-2026-71963","cvss":8.8,"epss":0.0086,"slug":"cve-2026-71963-nous-research-hermes-agent-remote-code-execution-in-git-config","title":"Nous Research Hermes Agent remote code execution in git config","severity":"high","exploited":false,"published_at":"2026-09-03T16:18:21.71+00:00","url":"https://junglewise.ai/threats/cve-2026-71963-nous-research-hermes-agent-remote-code-execution-in-git-config"},{"cve":"CVE-2026-82021","cvss":8.3,"epss":0.0034,"slug":"cve-2026-82021-nous-research-hermes-agent-supply-chain-vulnerability-in-mcp","title":"Nous Research Hermes Agent supply chain vulnerability in MCP catalog","severity":"high","exploited":false,"published_at":"2026-08-28T20:20:14.47+00:00","url":"https://junglewise.ai/threats/cve-2026-82021-nous-research-hermes-agent-supply-chain-vulnerability-in-mcp"},{"cve":"CVE-2026-53869","cvss":7.5,"epss":0.0081,"slug":"cve-2026-53869-nousresearch-hermes-agent-dns-rebinding-in-websocket-endpoints","title":"NousResearch Hermes Agent DNS rebinding in WebSocket endpoints","severity":"high","exploited":false,"published_at":"2026-06-17T19:18:10.743+00:00","url":"https://junglewise.ai/threats/cve-2026-53869-nousresearch-hermes-agent-dns-rebinding-in-websocket-endpoints"},{"cve":"CVE-2026-9367","cvss":7.3,"epss":0.0102,"slug":"cve-2026-9367-nousresearch-hermes-agent-os-command-injection-in-terminal-tool","title":"NousResearch hermes-agent OS command injection in terminal_tool","severity":"high","exploited":false,"published_at":"2026-05-24T09:16:32.793+00:00","url":"https://junglewise.ai/threats/cve-2026-9367-nousresearch-hermes-agent-os-command-injection-in-terminal-tool"},{"cve":"CVE-2026-9368","cvss":7.3,"epss":0.0064,"slug":"cve-2026-9368-nousresearch-hermes-agent-sandbox-bypass-in-execute-code-tool","title":"NousResearch hermes-agent sandbox bypass in execute_code tool","severity":"high","exploited":false,"published_at":"2026-05-24T09:16:32.963+00:00","url":"https://junglewise.ai/threats/cve-2026-9368-nousresearch-hermes-agent-sandbox-bypass-in-execute-code-tool"},{"cve":"CVE-2026-9366","cvss":7.3,"epss":0.0052,"slug":"cve-2026-9366-nousresearch-hermes-agent-prompt-injection-in-prompt-builder-py","title":"NousResearch hermes-agent prompt injection in prompt_builder.py","severity":"high","exploited":false,"published_at":"2026-05-24T09:16:32.617+00:00","url":"https://junglewise.ai/threats/cve-2026-9366-nousresearch-hermes-agent-prompt-injection-in-prompt-builder-py"},{"cve":"CVE-2026-9353","cvss":7.3,"epss":0.0052,"slug":"cve-2026-9353-nousresearch-hermes-agent-prompt-injection-bypass-in-skills-guard","title":"NousResearch hermes-agent prompt injection bypass in Skills Guard","severity":"high","exploited":false,"published_at":"2026-05-24T05:16:40.357+00:00","url":"https://junglewise.ai/threats/cve-2026-9353-nousresearch-hermes-agent-prompt-injection-bypass-in-skills-guard"},{"cve":"CVE-2026-85105","cvss":7.3,"epss":0.005,"slug":"cve-2026-85105-nousresearch-hermes-agent-authorization-bypass-in-session","title":"NousResearch hermes-agent authorization bypass in Session Management","severity":"high","exploited":false,"published_at":"2026-09-03T13:06:21.25+00:00","url":"https://junglewise.ai/threats/cve-2026-85105-nousresearch-hermes-agent-authorization-bypass-in-session"},{"cve":"CVE-2026-10221","cvss":7.3,"epss":0.003,"slug":"cve-2026-10221-nousresearch-hermes-agent-prompt-injection-in-context-compression","title":"NousResearch hermes-agent prompt injection in context compression","severity":"high","exploited":false,"published_at":"2026-06-01T04:16:21.55+00:00","url":"https://junglewise.ai/threats/cve-2026-10221-nousresearch-hermes-agent-prompt-injection-in-context-compression"},{"cve":"CVE-2026-9350","cvss":7.3,"epss":0.0004,"slug":"cve-2026-9350-nousresearch-hermes-agent-authorization-bypass-in-batch-runner","title":"NousResearch hermes-agent authorization bypass in Batch Runner","severity":"high","exploited":false,"published_at":"2026-05-24T04:17:04.113+00:00","url":"https://junglewise.ai/threats/cve-2026-9350-nousresearch-hermes-agent-authorization-bypass-in-batch-runner"}],"generated_at":"2026-09-26T12:07:00.15149+00:00"}