Skip to content
OpenAdvisories

Vendor

hermes-webui

1 known vulnerabilities.

Products

hermes-webui 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-55196

    Hermes WebUI < 0.51.409 - Unauthenticated Passkey Registration via Authentication Bypass

    Hermes WebUI before 0.51.409 contains an authentication bypass vulnerability in passkey registration endpoints that allows unauthenticated remote attackers to register arbitrary passkeys. When HERMES_WEBUI_PASSKEY=1 is enabled with no existing credentials, PO…

    hermes-webui hermes-webui