# hermes-agent (PyPI) vulnerabilities 10 known vulnerabilities (1 high, 9 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 0.19.0 (Jul 20, 2026): affected by 2 advisories - Newest unaffected release: Every release is affected by at least one advisory - Weekly downloads: 35.7K - Dependents: 15 - Releases: 11 since 0.13.0 (May 14, 2026) - Registry: https://pypi.org/project/hermes-agent/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-53870: 0.13.0 to 0.15.2 (0.16.0 is outside it) - CVE-2026-53869: 0.13.0 to 0.15.2 (0.16.0 is outside it) - CVE-2026-10224: 0.13.0 to 0.19.0 (through the newest release) - CVE-2026-10223: 0.13.0 to 0.14.0 (0.15.0 is outside it) - CVE-2026-10222: 0.13.0 to 0.17.0 (0.18.0 is outside it) - CVE-2026-10221: 0.13.0 to 0.19.0 (through the newest release) - CVE-2026-9369: 0.13.0 to 0.14.0 (0.15.0 is outside it) - CVE-2026-9368: no published release is affected - CVE-2026-9366: 0.13.0 to 0.14.0 (0.15.0 is outside it) - CVE-2026-9353: 0.13.0 to 0.14.0 (0.15.0 is outside it) ## Advisories (10) ### [CVE-2026-53870](https://cve.now/CVE-2026-53870): Hermes Agent \< 0.16.0 - Sensitive File Permission Vulnerability in Store Files - Severity: Medium 6.8 - Published: Jun 17, 2026 - Affected: fixed in 0.16.0. - Fixed in 0.16.0 (released Jun 6, 2026, 11 days before disclosure). - The latest release, 0.19.0, is not affected. ### [CVE-2026-53869](https://cve.now/CVE-2026-53869): Hermes Agent \< 0.16.0 - DNS Rebinding Bypass via WebSocket Endpoints - Severity: High 8.7 - Published: Jun 17, 2026 - Affected: fixed in 0.16.0. - Fixed in 0.16.0 (released Jun 6, 2026, 11 days before disclosure). - The latest release, 0.19.0, is not affected. ### [CVE-2026-10224](https://cve.now/CVE-2026-10224): NousResearch hermes-agent Webhook Endpoint feishu.py \_handle\_webhook\_request resource consumption - Severity: Medium 6.9 - Published: Jun 1, 2026 - Affected: through 0.19.0. - No fix released. The latest release, 0.19.0, is still affected. ### [CVE-2026-10223](https://cve.now/CVE-2026-10223): NousResearch hermes-agent memory\_tool.py \_scan\_memory\_content injection - Severity: Medium 5.3 - Published: Jun 1, 2026 - Affected: fixed in 0.15.0. - Fixed in 0.15.0 (released May 28, 2026, 4 days before disclosure). - The latest release, 0.19.0, is not affected. ### [CVE-2026-10222](https://cve.now/CVE-2026-10222): NousResearch hermes-agent config.py \_sanitize\_env\_lines injection - Severity: Medium 6.3 - Published: Jun 1, 2026 - Affected: fixed in 0.18.0. - Fixed in 0.18.0 (released Jul 1, 2026, 30 days after disclosure). - The latest release, 0.19.0, is not affected. ### [CVE-2026-10221](https://cve.now/CVE-2026-10221): NousResearch hermes-agent run\_agent.py \_compress\_context injection - Severity: Medium 6.9 - Published: Jun 1, 2026 - Affected: through 0.19.0. - No fix released. The latest release, 0.19.0, is still affected. ### [CVE-2026-9369](https://cve.now/CVE-2026-9369): NousResearch hermes-agent CLI web-dashboard web\_server.py \_discover\_dashboard\_plugins comparison - Severity: Medium 4.8 - Published: May 24, 2026 - Affected: fixed in 0.15.0. - Fixed in 0.15.0 (released May 28, 2026, 4 days after disclosure). - The latest release, 0.19.0, is not affected. ### [CVE-2026-9368](https://cve.now/CVE-2026-9368): NousResearch hermes-agent Environment Variable code\_execution\_tool.py execute\_code sandbox - Severity: Medium 6.9 - Published: May 24, 2026 - Affected: fixed in 0.11.0. - Fixed in 0.13.0 (released May 14, 2026, 10 days before disclosure, the advisory names 0.11.0, which was never published). - The latest release, 0.19.0, is not affected. ### [CVE-2026-9366](https://cve.now/CVE-2026-9366): NousResearch hermes-agent prompt\_builder.py \_scan\_context\_content injection - Severity: Medium 6.9 - Published: May 24, 2026 - Affected: fixed in 0.15.0. - Fixed in 0.15.0 (released May 28, 2026, 4 days after disclosure). - The latest release, 0.19.0, is not affected. ### [CVE-2026-9353](https://cve.now/CVE-2026-9353): NousResearch hermes-agent Skills Guard Multi-Word Prompt skills\_guard.py injection - Severity: Medium 6.9 - Published: May 24, 2026 - Affected: fixed in 0.15.0. - Fixed in 0.15.0 (released May 28, 2026, 4 days after disclosure). - The latest release, 0.19.0, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/hermes-agent Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.