CVE-2026-18773

NousResearch hermes-agent Quick run.py _check_slash_access authorization

View on CVE.org
Published Aug 4, 2026 CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Description
A vulnerability was detected in NousResearch hermes-agent up to 2026.6.5. Affected by this issue is the function _check_slash_access of the file gateway/run.py of the component Quick Command Handler. The manipulation results in incorrect authorization. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Analysis

AI-generated

Technical impact

The flaw in the _check_slash_access function of the Quick Command Handler causes incorrect authorization checks. Attackers can remotely exploit this to gain unauthorized access to restricted operations. This results in potential confidentiality and integrity risks if malicious commands can be executed with the agent’s privileges. The issue is rooted in authorization and path validation weaknesses.

Affected Systems

The affected product is NousResearch hermes-agent, with vulnerability present in all releases up to version 2026.6.5.

Risk and Exploitability

The CVSS score of 5.3 indicates medium severity. No EPSS data is available, so the likelihood cannot be quantified precisely, but the flaw is publicly exploitable and can be launched remotely from external networks. It is not listed in the CISA KEV catalog. An attacker can bypass authorization checks, enabling use of the Quick Command Handler with the privileges of the running agent process.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade hermes-agent to the latest released version that fixes the _check_slash_access flaw
  • Restrict external access to the Quick Command Handler endpoint to trusted IP ranges or internal networks to reduce attack surface
  • Implement strict validation of slash paths to ensure the authority checks rely on correct input, mitigating the authorization bypass due to improper path handling

Generated by OpenCVE AI on August 4, 2026 at 19:45 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A vulnerability was detected in NousResearch hermes-agent up to 2026.6.5. Affected by this issue is the function _check_slash_access of the file gateway/run.py of the component Quick Command Handler. The manipulation results in incorrect authorization. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title NousResearch hermes-agent Quick run.py _check_slash_access authorization
First Time appeared Nousresearch
Nousresearch hermes-agent
Weaknesses CWE-285
CWE-863
CPEs cpe:2.3:a:nousresearch:hermes-agent:*:*:*:*:*:*:*:*
Vendors & Products Nousresearch
Nousresearch hermes-agent
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}
Weaknesses

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Aug 4, 2026, 4:40 PM
Reserved
Aug 4, 2026, 7:35 AM

View source JSON

Updated
Aug 4, 2026, 4:40 PM

JSON

Status
Deferred
Published
Aug 4, 2026, 4:16 PM
Modified
Oct 23, 2026, 11:10 PM

View source JSON

No data.

Updated
Aug 4, 2026, 7:45 PM

JSON