The DiscordAdapter._is_allowed_user method contains an authentication flaw that permits a remote actor to forge a Discord request which the agent treats as authenticated. This allows the agent to accept a malicious user as a legitimate user, potentially enabling unauthorized bot usage. The official description states that improper authentication may be exploited, and it is inferred that the attacker could use the bot to perform actions normally reserved for authenticated users.

NousResearch Hermes-agent versions up to and including 0.15.2 that implement the Discord platform integration are affected by this vulnerability. All deployments of these releases are exposed to the authentication bypass through the DiscordAdapter._is_allowed_user function.

The CVSS score of 6.3 indicates moderate severity, while the EPSS score of <1% suggests that exploitation in the wild is unlikely but not impossible. The vulnerability is remote, requiring the construction of a crafted Discord request and is described as high complexity and difficult to exploit. It is not listed in the CISA KEV catalog, indicating limited public exploitation evidence, yet the disclosed vulnerability warrants immediate attention.