The vulnerability is located in the resolve_session_by_title function within hermes_state.py of the resume Endpoint in NousResearch hermes-agent. By manipulating the Title argument, an attacker can bypass the intended authorization controls, potentially accessing data or actions that should be restricted. This weakness is categorized under CWE-285 (Improper Authorization) and CWE-639 (Authorization Bypass Through User-Controlled Data). The exploit is feasible remotely and has been disclosed publicly, meaning attackers could already be deploying it.

All installations of NousResearch hermes‑agent up through version 0.12.0 are affected. No specific patch level is known, but any deployment that has not yet upgraded beyond 0.12.0 must be considered vulnerable.

The CVSS score of 5.3 indicates moderate severity, and the EPSS score is not available at this time. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack can be performed remotely, likely through crafted HTTP requests to the resume endpoint. The lack of a published fix and the public disclosure suggest that exploitation may already be occurring in the wild.