Hermes WebUI versions prior to 0.51.269 contain a workspace boundary bypass that allows an authenticated attacker to set a remote terminal's working directory to a system location such as /etc. Because the SSH/remote terminal profile workspace resolution logic in _remote_terminal_workspace_candidate() returns early, the blocked‑root path check in _is_blocked_workspace_path() is never reached, and the request is treated as a trusted local workspace root. This flaw lets the attacker read local system files via the workspace file‑read helpers, exposing sensitive data and violating confidentiality.

Vulnerable releases are all Hermes WebUI versions before 0.51.269 from the vendor nesquena. The issue is present in the Hermes WebUI service that provides a web UI for managing workspaces; no specific edition or platform was listed.

The CVSS score of 6.3 indicates a moderate severity vulnerability. Exploitation requires authenticated access to the Hermes WebUI, after which the attacker can manipulate the remote terminal working directory. Because the EPSS score is not provided, current data on exploitation likelihood is unavailable, and the vulnerability is not listed in the CISA KEV catalog. Nonetheless, the ability to read system files could allow further compromise if trusted passwords or credentials are exposed.