Hermes WebUI before version 0.51.296 contains a workspace boundary bypass that allows an authenticated attacker to set a remote terminal's working directory to a system location such as /etc. By exploiting an early return in the SSH/remote terminal profile workspace resolution logic within _remote_terminal_workspace_candidate(), the blocked‑root path check in _is_blocked_workspace_path() is bypassed, causing the request to be treated as a trusted local workspace root. The attacker can then read local system files via the workspace file‑read helpers, exposing sensitive data and violating confidentiality.

Vulnerable releases are all Hermes WebUI versions before 0.51.296 from the vendor nesquena.

The CVSS score of 6.3 indicates a moderate severity vulnerability. Exploitation requires authenticated access to the Hermes WebUI, after which the attacker can manipulate the remote terminal working directory. Because the EPSS score is 0.00044 (0.044%), the exploitation likelihood is very low, and the vulnerability is not listed in the CISA KEV catalog. Nonetheless, the ability to read system files could allow further compromise if trusted passwords or credentials are exposed.