Skip to content
OpenAdvisories

Vendor

Nous Research

45 known vulnerabilities.

Products

hermes-agent 45
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-71963 Public exploit

    Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection

    Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to execute arbitrary OS commands by supplying a malicious repository with a crafted .git/config that sets core.fsmonitor to an at…

    Nous Research hermes-agent
  • Medium 5.3
    CVE-2026-14628 Public exploit

    NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversal

    A vulnerability was detected in NousResearch hermes-agent up to 2026.5.16. This impacts the function extract_media of the file gateway/platforms/base.py of the component Live Webhook Endpoint. Performing a manipulation results in path traversal. The attack ma…

    Nous Research hermes-agent