A vulnerability exists in the _compress_context function of NousResearch hermes-agent’s run_agent.py, allowing attackers to inject malicious content. The injection occurs remotely and can alter the agent’s processing logic; the exact consequences are not fully documented in the CVE, but the ability to inject indicates a potential for unintended behavior or execution of unwanted code.

The flaw affects all versions of NousResearch hermes-agent up to and including 0.12.0. Systems running these versions are susceptible to the injection vulnerability.

The CVSS score of 6.9 indicates a medium severity. No EPSS information is available, and the vulnerability is not listed in the CISA KEV catalog, suggesting a moderate likelihood of widespread exploitation. However, a publicly available exploit exists, and the attack vector is remote, meaning attackers can trigger the vulnerability without local access.