SZB-86e5d46770
EUVD-2026-107306 lists webhook route authorization flaw in Hermes Agent
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Nous Research
- Product
- Hermes Agent
- First seen
Summary
The EUVD listing, shared on Mastodon, describes a flaw in Nous Research Hermes Agent's webhook gateway with a CVSS v3.1 score of 7.5. It says the authorizing route is re-derived by splitting a session string, which a crafted route name can affect.
If you use Nous Research
Update Hermes Agent to the fixed version named in the vendor advisory
Review webhook route names for unexpected characters
Check webhook session logs for unauthorized routing
What the sources say 1
· Mastodon: “The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{delivery_id} and re-derives the authorizing route by splitting that string” Source