{"schema_version":1,"title":"NousResearch vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 35 vulnerabilities in NousResearch: 0 in the last 7 days and 17 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-85107, was published on 3 September 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/nousresearch","json_url":"https://junglewise.ai/threats/vendors/nousresearch.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/nousresearch","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":9,"all_time":35,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":6,"last_90_days":17,"last_365_days":35},"latest":[{"cve":"CVE-2026-85107","cvss":4.3,"epss":0.0051,"slug":"cve-2026-85107-nousresearch-hermes-agent-resource-exhaustion-in","title":"NousResearch hermes-agent resource exhaustion in resourceBufferFromUrl","severity":"medium","exploited":false,"published_at":"2026-09-03T13:06:21.603+00:00","url":"https://junglewise.ai/threats/cve-2026-85107-nousresearch-hermes-agent-resource-exhaustion-in"},{"cve":"CVE-2026-85106","cvss":6.3,"epss":0.0035,"slug":"cve-2026-85106-nousresearch-hermes-agent-server-side-request-forgery-in-link","title":"NousResearch hermes-agent server-side request forgery in Link Title Fetch","severity":"medium","exploited":false,"published_at":"2026-09-03T13:06:21.437+00:00","url":"https://junglewise.ai/threats/cve-2026-85106-nousresearch-hermes-agent-server-side-request-forgery-in-link"},{"cve":"CVE-2026-85105","cvss":7.3,"epss":0.005,"slug":"cve-2026-85105-nousresearch-hermes-agent-authorization-bypass-in-session","title":"NousResearch hermes-agent authorization bypass in Session Management","severity":"high","exploited":false,"published_at":"2026-09-03T13:06:21.25+00:00","url":"https://junglewise.ai/threats/cve-2026-85105-nousresearch-hermes-agent-authorization-bypass-in-session"},{"cve":"CVE-2026-84289","cvss":4.3,"epss":0.0047,"slug":"cve-2026-84289-nousresearch-hermes-agent-denial-of-service-in-mcp-tool","title":"NousResearch hermes-agent denial of service in MCP Tool","severity":"medium","exploited":false,"published_at":"2026-09-01T22:17:18.813+00:00","url":"https://junglewise.ai/threats/cve-2026-84289-nousresearch-hermes-agent-denial-of-service-in-mcp-tool"},{"cve":"CVE-2026-84288","cvss":4.3,"epss":0.0047,"slug":"cve-2026-84288-nousresearch-hermes-agent-denial-of-service-in-acp-prompt","title":"NousResearch hermes-agent denial of service in ACP Prompt Workflow","severity":"medium","exploited":false,"published_at":"2026-09-01T22:17:18.647+00:00","url":"https://junglewise.ai/threats/cve-2026-84288-nousresearch-hermes-agent-denial-of-service-in-acp-prompt"},{"cve":"CVE-2026-84287","cvss":4.3,"epss":0.0052,"slug":"cve-2026-84287-nousresearch-hermes-agent-denial-of-service-in-session-chat","title":"NousResearch hermes-agent denial of service in session chat","severity":"medium","exploited":false,"published_at":"2026-09-01T21:18:46.567+00:00","url":"https://junglewise.ai/threats/cve-2026-84287-nousresearch-hermes-agent-denial-of-service-in-session-chat"},{"cve":"CVE-2026-18775","cvss":6.3,"epss":0.0038,"slug":"cve-2026-18775-nousresearch-hermes-agent-ssrf-in-browser-tooling","title":"NousResearch hermes-agent SSRF in browser tooling","severity":"medium","exploited":false,"published_at":"2026-08-04T17:16:48.287+00:00","url":"https://junglewise.ai/threats/cve-2026-18775-nousresearch-hermes-agent-ssrf-in-browser-tooling"},{"cve":"CVE-2026-18774","cvss":6.3,"epss":0.0035,"slug":"cve-2026-18774-nousresearch-hermes-agent-server-side-request-forgery-in-image","title":"NousResearch hermes-agent server-side request forgery in image provider","severity":"medium","exploited":false,"published_at":"2026-08-04T17:16:48.127+00:00","url":"https://junglewise.ai/threats/cve-2026-18774-nousresearch-hermes-agent-server-side-request-forgery-in-image"},{"cve":"CVE-2026-18773","cvss":6.3,"epss":0.0035,"slug":"cve-2026-18773-nousresearch-hermes-agent-authorization-bypass-in-slash-commands","title":"NousResearch hermes-agent authorization bypass in slash commands","severity":"medium","exploited":false,"published_at":"2026-08-04T16:16:22.47+00:00","url":"https://junglewise.ai/threats/cve-2026-18773-nousresearch-hermes-agent-authorization-bypass-in-slash-commands"},{"cve":"CVE-2026-17432","cvss":5,"slug":"cve-2026-17432-nousresearch-hermes-agent-authorization-bypass-in-simplex-gateway","title":"NousResearch hermes-agent authorization bypass in SimpleX Gateway","severity":"medium","exploited":false,"published_at":"2026-07-26T01:16:25.783+00:00","url":"https://junglewise.ai/threats/cve-2026-17432-nousresearch-hermes-agent-authorization-bypass-in-simplex-gateway"},{"cve":"CVE-2026-15311","cvss":3.5,"slug":"cve-2026-15311-nousresearch-hermes-agent-xss-in-matrix-adapter","title":"NousResearch hermes-agent XSS in Matrix Adapter","severity":"low","exploited":false,"published_at":"2026-07-10T00:16:32.853+00:00","url":"https://junglewise.ai/threats/cve-2026-15311-nousresearch-hermes-agent-xss-in-matrix-adapter"},{"cve":"CVE-2026-14783","cvss":4.3,"slug":"cve-2026-14783-nousresearch-hermes-agent-path-traversal-in-skill-view","title":"NousResearch hermes-agent path traversal in skill_view","severity":"medium","exploited":false,"published_at":"2026-07-06T00:16:55.037+00:00","url":"https://junglewise.ai/threats/cve-2026-14783-nousresearch-hermes-agent-path-traversal-in-skill-view"},{"cve":"CVE-2026-14628","cvss":5.3,"slug":"cve-2026-14628-nousresearch-hermes-agent-path-traversal-in-live-webhook-endpoint","title":"NousResearch hermes-agent path traversal in Live Webhook Endpoint","severity":"medium","exploited":false,"published_at":"2026-07-04T13:16:30.413+00:00","url":"https://junglewise.ai/threats/cve-2026-14628-nousresearch-hermes-agent-path-traversal-in-live-webhook-endpoint"},{"cve":"CVE-2026-14627","cvss":5.6,"slug":"cve-2026-14627-nousresearch-hermes-agent-improper-authentication-in-discord","title":"NousResearch hermes-agent improper authentication in Discord integration","severity":"medium","exploited":false,"published_at":"2026-07-04T13:16:30.23+00:00","url":"https://junglewise.ai/threats/cve-2026-14627-nousresearch-hermes-agent-improper-authentication-in-discord"},{"cve":"CVE-2026-14626","cvss":4.3,"slug":"cve-2026-14626-nousresearch-hermes-agent-denial-of-service-in-aiagent-run","title":"NousResearch hermes-agent denial of service in AIAgent.run_conversation","severity":"medium","exploited":false,"published_at":"2026-07-04T12:16:53.903+00:00","url":"https://junglewise.ai/threats/cve-2026-14626-nousresearch-hermes-agent-denial-of-service-in-aiagent-run"},{"cve":"CVE-2026-14625","cvss":6.3,"slug":"cve-2026-14625-nousresearch-hermes-agent-security-scanner-bypass-in-gateway","title":"NousResearch hermes-agent security scanner bypass in gateway shell execution","severity":"medium","exploited":false,"published_at":"2026-07-04T12:16:53.74+00:00","url":"https://junglewise.ai/threats/cve-2026-14625-nousresearch-hermes-agent-security-scanner-bypass-in-gateway"},{"cve":"CVE-2026-14617","cvss":3.1,"slug":"cve-2026-14617-nousresearch-hermes-agent-information-disclosure-via-case","title":"NousResearch hermes-agent information disclosure via case-sensitive tag matching","severity":"low","exploited":false,"published_at":"2026-07-03T22:16:52.943+00:00","url":"https://junglewise.ai/threats/cve-2026-14617-nousresearch-hermes-agent-information-disclosure-via-case"},{"cve":"CVE-2026-53870","cvss":5.5,"epss":0.0015,"slug":"cve-2026-53870-nousresearch-hermes-agent-sensitive-information-disclosure-via","title":"NousResearch Hermes Agent sensitive information disclosure via world-readable files","severity":"medium","exploited":false,"published_at":"2026-06-17T19:18:10.883+00:00","url":"https://junglewise.ai/threats/cve-2026-53870-nousresearch-hermes-agent-sensitive-information-disclosure-via"},{"cve":"CVE-2026-53869","cvss":7.5,"epss":0.0081,"slug":"cve-2026-53869-nousresearch-hermes-agent-dns-rebinding-in-websocket-endpoints","title":"NousResearch Hermes Agent DNS rebinding in WebSocket endpoints","severity":"high","exploited":false,"published_at":"2026-06-17T19:18:10.743+00:00","url":"https://junglewise.ai/threats/cve-2026-53869-nousresearch-hermes-agent-dns-rebinding-in-websocket-endpoints"},{"cve":"CVE-2026-11461","cvss":6.3,"slug":"cve-2026-11461-nousresearch-hermes-agent-authorization-bypass-in-resolve-session","title":"NousResearch hermes-agent authorization bypass in resolve_session_by_title","severity":"medium","exploited":false,"published_at":"2026-06-07T22:16:22.547+00:00","url":"https://junglewise.ai/threats/cve-2026-11461-nousresearch-hermes-agent-authorization-bypass-in-resolve-session"},{"cve":"CVE-2026-10548","cvss":5.3,"slug":"cve-2026-10548-nousresearch-hermes-agent-improper-authentication-in-credential","title":"NousResearch hermes-agent improper authentication in Credential Pool","severity":"medium","exploited":false,"published_at":"2026-06-02T02:16:15.233+00:00","url":"https://junglewise.ai/threats/cve-2026-10548-nousresearch-hermes-agent-improper-authentication-in-credential"},{"cve":"CVE-2026-10224","cvss":5.3,"epss":0.0037,"slug":"cve-2026-10224-nousresearch-hermes-agent-denial-of-service-in-feishu-webhook","title":"NousResearch hermes-agent denial of service in Feishu webhook handler","severity":"medium","exploited":false,"published_at":"2026-06-01T06:16:38.657+00:00","url":"https://junglewise.ai/threats/cve-2026-10224-nousresearch-hermes-agent-denial-of-service-in-feishu-webhook"},{"cve":"CVE-2026-10223","cvss":6.3,"epss":0.0023,"slug":"cve-2026-10223-nousresearch-hermes-agent-prompt-injection-bypass-in-memory-tool","title":"NousResearch hermes-agent prompt injection bypass in memory_tool.py","severity":"medium","exploited":false,"published_at":"2026-06-01T06:16:37.9+00:00","url":"https://junglewise.ai/threats/cve-2026-10223-nousresearch-hermes-agent-prompt-injection-bypass-in-memory-tool"},{"cve":"CVE-2026-10222","cvss":5.6,"epss":0.0027,"slug":"cve-2026-10222-nousresearch-hermes-agent-injection-in-sanitize-env-lines","title":"NousResearch hermes-agent injection in _sanitize_env_lines","severity":"medium","exploited":false,"published_at":"2026-06-01T06:16:36.053+00:00","url":"https://junglewise.ai/threats/cve-2026-10222-nousresearch-hermes-agent-injection-in-sanitize-env-lines"},{"cve":"CVE-2026-10221","cvss":7.3,"epss":0.003,"slug":"cve-2026-10221-nousresearch-hermes-agent-prompt-injection-in-context-compression","title":"NousResearch hermes-agent prompt injection in context compression","severity":"high","exploited":false,"published_at":"2026-06-01T04:16:21.55+00:00","url":"https://junglewise.ai/threats/cve-2026-10221-nousresearch-hermes-agent-prompt-injection-in-context-compression"}],"vendor":{"hub":true,"name":"NousResearch","slug":"nousresearch","homepage":"https://nousresearch.com/","description":"NousResearch is an open-source collective focused on the development and fine-tuning of large language models.","url":"https://junglewise.ai/threats/vendors/nousresearch"},"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-53869","cvss":7.5,"epss":0.0081,"slug":"cve-2026-53869-nousresearch-hermes-agent-dns-rebinding-in-websocket-endpoints","title":"NousResearch Hermes Agent DNS rebinding in WebSocket endpoints","severity":"high","exploited":false,"published_at":"2026-06-17T19:18:10.743+00:00","url":"https://junglewise.ai/threats/cve-2026-53869-nousresearch-hermes-agent-dns-rebinding-in-websocket-endpoints"},{"cve":"CVE-2026-9367","cvss":7.3,"epss":0.0102,"slug":"cve-2026-9367-nousresearch-hermes-agent-os-command-injection-in-terminal-tool","title":"NousResearch hermes-agent OS command injection in terminal_tool","severity":"high","exploited":false,"published_at":"2026-05-24T09:16:32.793+00:00","url":"https://junglewise.ai/threats/cve-2026-9367-nousresearch-hermes-agent-os-command-injection-in-terminal-tool"},{"cve":"CVE-2026-9368","cvss":7.3,"epss":0.0064,"slug":"cve-2026-9368-nousresearch-hermes-agent-sandbox-bypass-in-execute-code-tool","title":"NousResearch hermes-agent sandbox bypass in execute_code tool","severity":"high","exploited":false,"published_at":"2026-05-24T09:16:32.963+00:00","url":"https://junglewise.ai/threats/cve-2026-9368-nousresearch-hermes-agent-sandbox-bypass-in-execute-code-tool"},{"cve":"CVE-2026-9366","cvss":7.3,"epss":0.0052,"slug":"cve-2026-9366-nousresearch-hermes-agent-prompt-injection-in-prompt-builder-py","title":"NousResearch hermes-agent prompt injection in prompt_builder.py","severity":"high","exploited":false,"published_at":"2026-05-24T09:16:32.617+00:00","url":"https://junglewise.ai/threats/cve-2026-9366-nousresearch-hermes-agent-prompt-injection-in-prompt-builder-py"},{"cve":"CVE-2026-9353","cvss":7.3,"epss":0.0052,"slug":"cve-2026-9353-nousresearch-hermes-agent-prompt-injection-bypass-in-skills-guard","title":"NousResearch hermes-agent prompt injection bypass in Skills Guard","severity":"high","exploited":false,"published_at":"2026-05-24T05:16:40.357+00:00","url":"https://junglewise.ai/threats/cve-2026-9353-nousresearch-hermes-agent-prompt-injection-bypass-in-skills-guard"},{"cve":"CVE-2026-85105","cvss":7.3,"epss":0.005,"slug":"cve-2026-85105-nousresearch-hermes-agent-authorization-bypass-in-session","title":"NousResearch hermes-agent authorization bypass in Session Management","severity":"high","exploited":false,"published_at":"2026-09-03T13:06:21.25+00:00","url":"https://junglewise.ai/threats/cve-2026-85105-nousresearch-hermes-agent-authorization-bypass-in-session"},{"cve":"CVE-2026-10221","cvss":7.3,"epss":0.003,"slug":"cve-2026-10221-nousresearch-hermes-agent-prompt-injection-in-context-compression","title":"NousResearch hermes-agent prompt injection in context compression","severity":"high","exploited":false,"published_at":"2026-06-01T04:16:21.55+00:00","url":"https://junglewise.ai/threats/cve-2026-10221-nousresearch-hermes-agent-prompt-injection-in-context-compression"},{"cve":"CVE-2026-9350","cvss":7.3,"epss":0.0004,"slug":"cve-2026-9350-nousresearch-hermes-agent-authorization-bypass-in-batch-runner","title":"NousResearch hermes-agent authorization bypass in Batch Runner","severity":"high","exploited":false,"published_at":"2026-05-24T04:17:04.113+00:00","url":"https://junglewise.ai/threats/cve-2026-9350-nousresearch-hermes-agent-authorization-bypass-in-batch-runner"},{"cve":"CVE-2026-10220","cvss":7.3,"slug":"cve-2026-10220-nousresearch-hermes-agent-prompt-injection-bypass-in-skills-tool","title":"NousResearch hermes-agent prompt injection bypass in skills_tool.py","severity":"high","exploited":false,"published_at":"2026-06-01T04:16:21.26+00:00","url":"https://junglewise.ai/threats/cve-2026-10220-nousresearch-hermes-agent-prompt-injection-bypass-in-skills-tool"},{"cve":"CVE-2026-9351","cvss":6.5,"epss":0.0009,"slug":"cve-2026-9351-nousresearch-hermes-agent-path-traversal-in-read-file-tool","title":"NousResearch hermes-agent path traversal in read_file tool","severity":"medium","exploited":false,"published_at":"2026-05-24T04:17:04.43+00:00","url":"https://junglewise.ai/threats/cve-2026-9351-nousresearch-hermes-agent-path-traversal-in-read-file-tool"}],"generated_at":"2026-09-28T03:07:00.154823+00:00","technologies":[{"name":"NousResearch Hermes Agent","slug":"hermes-agent","vulnerabilities":38,"url":"https://junglewise.ai/threats/technologies/hermes-agent"}]}