# cve.now: Nousresearch

The newest entries naming Nousresearch as an affected vendor (up to 200), of 44 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-71963](https://cve.now/CVE-2026-71963.md): Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection (CVSS 8.6)
- [CVE-2026-85107](https://cve.now/CVE-2026-85107.md): NousResearch hermes-agent Electron Main Process main.ts resourceBufferFromUrl allocation of resources (CVSS 5.3)
- [CVE-2026-85106](https://cve.now/CVE-2026-85106.md): NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgery (CVSS 5.3)
- [CVE-2026-85105](https://cve.now/CVE-2026-85105.md): NousResearch hermes-agent Session Management s71.py \_sess\_nowait authorization (CVSS 6.9)
- [CVE-2026-84289](https://cve.now/CVE-2026-84289.md): NousResearch hermes-agent MCP Tool mcp\_tool.py list\_tools memory allocation (CVSS 5.3)
- [CVE-2026-84288](https://cve.now/CVE-2026-84288.md): NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of service (CVSS 5.3)
- [CVE-2026-84287](https://cve.now/CVE-2026-84287.md): NousResearch hermes-agent Session Chat api\_server.py denial of service (CVSS 5.3)
- [CVE-2026-82021](https://cve.now/CVE-2026-82021.md): Hermes Agent 0.18.2 \< 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch Reference (CVSS 9.0)
- [CVE-2026-82020](https://cve.now/CVE-2026-82020.md): Hermes Agent 0.16.0 \< 0.17.0 Credential Store Overwrite via File-Write Tool (CVSS 7.6)
- [CVE-2026-18993](https://cve.now/CVE-2026-18993.md): NousResearch hermes-agent Memory Toolset model\_tools.py access control (CVSS 5.3)
- [CVE-2026-18976](https://cve.now/CVE-2026-18976.md): NousResearch hermes-agent disabled\_toolsets agent\_init.py get\_tool\_definitions privileges assignment (CVSS 5.3)
- [CVE-2026-18775](https://cve.now/CVE-2026-18775.md): NousResearch hermes-agent Browser Tooling browser\_tool.py browser\_snapshot server-side request forgery (CVSS 5.3)
- [CVE-2026-18774](https://cve.now/CVE-2026-18774.md): NousResearch hermes-agent xAI Image Generation Provider image\_gen\_provider.py save\_url\_image server-side request forgery (CVSS 5.3)
- [CVE-2026-18773](https://cve.now/CVE-2026-18773.md): NousResearch hermes-agent Quick run.py \_check\_slash\_access authorization (CVSS 5.3)
- [CVE-2026-17432](https://cve.now/CVE-2026-17432.md): NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control (CVSS 2.3)
- [CVE-2026-15311](https://cve.now/CVE-2026-15311.md): NousResearch hermes-agent Matrix Adapter matrix.py MatrixAdapter.\_markdown\_to\_html cross site scripting (CVSS 5.1)
- [CVE-2026-14783](https://cve.now/CVE-2026-14783.md): NousResearch hermes-agent skills\_tool.py skill\_view path traversal (CVSS 5.3)
- [CVE-2026-14628](https://cve.now/CVE-2026-14628.md): NousResearch hermes-agent Live Webhook Endpoint base.py extract\_media path traversal (CVSS 6.9)
- [CVE-2026-14627](https://cve.now/CVE-2026-14627.md): NousResearch hermes-agent Discord Platform Integration discord.py DiscordAdapter.\_is\_allowed\_user improper authentication (CVSS 6.3)
- [CVE-2026-14626](https://cve.now/CVE-2026-14626.md): NousResearch hermes-agent HTTP API run\_agent.py AIAgent.run\_conversation denial of service (CVSS 5.3)
- [CVE-2026-14625](https://cve.now/CVE-2026-14625.md): NousResearch hermes-agent server.py shell.exec protection mechanism (CVSS 5.3)
- [CVE-2026-14617](https://cve.now/CVE-2026-14617.md): NousResearch hermes-agent Streaming Reasoning Tag Filter stream\_consumer.py GatewayStreamConsumer.\_filter\_and\_accumulate case sensitivity (CVSS 2.3)
- [CVE-2026-53870](https://cve.now/CVE-2026-53870.md): Hermes Agent \< 0.16.0 - Sensitive File Permission Vulnerability in Store Files (CVSS 6.8)
- [CVE-2026-53869](https://cve.now/CVE-2026-53869.md): Hermes Agent \< 0.16.0 - DNS Rebinding Bypass via WebSocket Endpoints (CVSS 8.7)
- [CVE-2026-11461](https://cve.now/CVE-2026-11461.md): NousResearch hermes-agent resume Endpoint hermes\_state.py resolve\_session\_by\_title authorization (CVSS 5.3)
- [CVE-2026-10548](https://cve.now/CVE-2026-10548.md): NousResearch hermes-agent Credential Pool Synchronization credential\_pool.py \_sync\_anthropic\_entry\_from\_credentials\_file improper authentication (CVSS 4.8)
- [CVE-2026-10224](https://cve.now/CVE-2026-10224.md): NousResearch hermes-agent Webhook Endpoint feishu.py \_handle\_webhook\_request resource consumption (CVSS 6.9)
- [CVE-2026-10223](https://cve.now/CVE-2026-10223.md): NousResearch hermes-agent memory\_tool.py \_scan\_memory\_content injection (CVSS 5.3)
- [CVE-2026-10222](https://cve.now/CVE-2026-10222.md): NousResearch hermes-agent config.py \_sanitize\_env\_lines injection (CVSS 6.3)
- [CVE-2026-10221](https://cve.now/CVE-2026-10221.md): NousResearch hermes-agent run\_agent.py \_compress\_context injection (CVSS 6.9)
- [CVE-2026-10220](https://cve.now/CVE-2026-10220.md): NousResearch hermes-agent skills\_tool.py skill\_view injection (CVSS 6.9)
- [CVE-2026-9369](https://cve.now/CVE-2026-9369.md): NousResearch hermes-agent CLI web-dashboard web\_server.py \_discover\_dashboard\_plugins comparison (CVSS 4.8)
- [CVE-2026-9368](https://cve.now/CVE-2026-9368.md): NousResearch hermes-agent Environment Variable code\_execution\_tool.py execute\_code sandbox (CVSS 6.9)
- [CVE-2026-9367](https://cve.now/CVE-2026-9367.md): NousResearch hermes-agent terminal\_tool approval.py detect\_dangerous\_command os command injection (CVSS 6.9)
- [CVE-2026-9366](https://cve.now/CVE-2026-9366.md): NousResearch hermes-agent prompt\_builder.py \_scan\_context\_content injection (CVSS 6.9)
- [CVE-2026-9354](https://cve.now/CVE-2026-9354.md): NousResearch hermes-agent Slack Agent/Mattermost Agent escape output (CVSS 6.9)
- [CVE-2026-9353](https://cve.now/CVE-2026-9353.md): NousResearch hermes-agent Skills Guard Multi-Word Prompt skills\_guard.py injection (CVSS 6.9)
- [CVE-2026-9352](https://cve.now/CVE-2026-9352.md): NousResearch hermes-agent Messaging Gateway local.py \_make\_run\_env information disclosure (CVSS 6.9)
- [CVE-2026-9351](https://cve.now/CVE-2026-9351.md): NousResearch hermes-agent read\_file Tool file\_tools.py \_is\_blocked\_device path traversal (CVSS 6.9)
- [CVE-2026-9350](https://cve.now/CVE-2026-9350.md): NousResearch hermes-agent Batch Runner approval.py check\_all\_command\_guards authorization (CVSS 6.9)
- [CVE-2026-7397](https://cve.now/CVE-2026-7397.md): NousResearch hermes-agent file\_tools.py \_check\_sensitive\_path symlink (CVSS 4.8)
- [CVE-2026-7396](https://cve.now/CVE-2026-7396.md): NousResearch hermes-agent WeChat Work Platform Adapter wecom.py path traversal (CVSS 6.9)
- [CVE-2026-7113](https://cve.now/CVE-2026-7113.md): NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication (CVSS 6.3)
- [CVE-2026-7112](https://cve.now/CVE-2026-7112.md): NousResearch hermes-agent API\_SERVER\_KEY api\_server.py \_check\_auth improper authentication (CVSS 6.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/nousresearch
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.