Nousresearch vulnerabilities
44 CVEs and advisories name Nousresearch as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-10220NousResearch hermes-agent skills_tool.py skill_view injection
- CVE-2026-9369NousResearch hermes-agent CLI web-dashboard web_server.py _discover_dashboard_plugins comparison
- CVE-2026-9368NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandbox
- CVE-2026-9367NousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injection
- CVE-2026-9366NousResearch hermes-agent prompt_builder.py _scan_context_content injection
- CVE-2026-9354NousResearch hermes-agent Slack Agent/Mattermost Agent escape output
- CVE-2026-9353NousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injection
- CVE-2026-9352NousResearch hermes-agent Messaging Gateway local.py _make_run_env information disclosure
- CVE-2026-9351NousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversal
- CVE-2026-9350NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization
- CVE-2026-7397NousResearch hermes-agent file_tools.py _check_sensitive_path symlink
- CVE-2026-7396NousResearch hermes-agent WeChat Work Platform Adapter wecom.py path traversal
- CVE-2026-7113NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication
- CVE-2026-7112NousResearch hermes-agent API_SERVER_KEY api_server.py _check_auth improper authentication