The flaw is located in the DiscordAdapter._is_allowed_user method of the NousResearch Hermes-agent Discord platform integration. Due to an improper validation of Discord user credentials, an attacker can forge a Discord request that the agent accepts as an authenticated user. This can allow the attacker to issue privileged bot commands or hijack the bot’s functionality, leading to unauthorized access or data exposure.

NousResearch Hermes-agent versions up to and including 0.15.2 contain the vulnerable implementation._is_allowed_user. All installations of those releases are exposed to the authentication bypass and must migrate to a patched version.

The CVSS score of 6.3 indicates moderate severity, and the EPSS score of < 1% suggests that exploitation in the wild is unlikely but not impossible. The vulnerability is exploitable remotely; it requires the attacker to construct a malicious Discord message that bypasses authentication checks, a task that is described as high complexity in the advisory.