PyPIPackage

hermes-agent

10 known vulnerabilities (1 high, 9 medium), with the versions each affects and the releases that fix them.

Latest release: 0.19.0 (Jul 20, 2026): affected by 2 advisories
Newest unaffected release: Every release is affected by at least one advisory
Advisories: 10 · 1 high, 9 medium

Weekly downloads: 35.7K
Dependents: 15
Releases: 11 since 0.13.0 (May 14, 2026)
Registry: PyPI
Releases read: Nov 8, 2026

Version timeline

CVE-2026-53870
Affects 0.13.0 to 0.15.2 (0.16.0 is outside it)
CVE-2026-53869
Affects 0.13.0 to 0.15.2 (0.16.0 is outside it)
CVE-2026-10224
Affects 0.13.0 to 0.19.0 (through the newest release)
CVE-2026-10223
Affects 0.13.0 to 0.14.0 (0.15.0 is outside it)
CVE-2026-10222
Affects 0.13.0 to 0.17.0 (0.18.0 is outside it)
CVE-2026-10221
Affects 0.13.0 to 0.19.0 (through the newest release)
CVE-2026-9369
Affects 0.13.0 to 0.14.0 (0.15.0 is outside it)
CVE-2026-9368
No published release is affected
No published release is affected
CVE-2026-9366
Affects 0.13.0 to 0.14.0 (0.15.0 is outside it)
CVE-2026-9353
Affects 0.13.0 to 0.14.0 (0.15.0 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 10

CVE-2026-53870Medium 6.8
Hermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store Files
Affected: fixed in 0.16.0.
Fixed in 0.16.0 (released Jun 6, 2026, 11 days before disclosure).
The latest release, 0.19.0, is not affected.
CVE-2026-53869High 8.7
Hermes Agent < 0.16.0 - DNS Rebinding Bypass via WebSocket Endpoints
Affected: fixed in 0.16.0.
Fixed in 0.16.0 (released Jun 6, 2026, 11 days before disclosure).
The latest release, 0.19.0, is not affected.
CVE-2026-10224Medium 6.9
NousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource consumption
Affected: through 0.19.0.
No fix released. The latest release, 0.19.0, is still affected.
CVE-2026-10223Medium 5.3
NousResearch hermes-agent memory_tool.py _scan_memory_content injection
Affected: fixed in 0.15.0.
Fixed in 0.15.0 (released May 28, 2026, 4 days before disclosure).
The latest release, 0.19.0, is not affected.
CVE-2026-10222Medium 6.3
NousResearch hermes-agent config.py _sanitize_env_lines injection
Affected: fixed in 0.18.0.
Fixed in 0.18.0 (released Jul 1, 2026, 30 days after disclosure).
The latest release, 0.19.0, is not affected.
CVE-2026-10221Medium 6.9
NousResearch hermes-agent run_agent.py _compress_context injection
Affected: through 0.19.0.
No fix released. The latest release, 0.19.0, is still affected.
CVE-2026-9369Medium 4.8
NousResearch hermes-agent CLI web-dashboard web_server.py _discover_dashboard_plugins comparison
Affected: fixed in 0.15.0.
Fixed in 0.15.0 (released May 28, 2026, 4 days after disclosure).
The latest release, 0.19.0, is not affected.
CVE-2026-9368Medium 6.9
NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandbox
Affected: fixed in 0.11.0.
Fixed in 0.13.0 (released May 14, 2026, 10 days before disclosure, the advisory names 0.11.0, which was never published).
The latest release, 0.19.0, is not affected.
CVE-2026-9366Medium 6.9
NousResearch hermes-agent prompt_builder.py _scan_context_content injection
Affected: fixed in 0.15.0.
Fixed in 0.15.0 (released May 28, 2026, 4 days after disclosure).
The latest release, 0.19.0, is not affected.
CVE-2026-9353Medium 6.9
NousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injection
Affected: fixed in 0.15.0.
Fixed in 0.15.0 (released May 28, 2026, 4 days after disclosure).
The latest release, 0.19.0, is not affected.