CVE-2026-7396

NousResearch hermes-agent WeChat Work Platform Adapter wecom.py path traversal

View on CVE.org
Published Apr 29, 2026 CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Description
A vulnerability was identified in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/wecom.py of the component WeChat Work Platform Adapter. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

Analysis

AI-generated

Technical impact

A path traversal flaw exists in the wecom.py component of the WeChat Work Platform Adapter. The vulnerability is classified as CWE‑22 and permits a remote attacker to include arbitrary directory references in a request that are not properly sanitized, leading to unauthorized file disclosure or modification. The publicly available exploit demonstrates that the attack can be triggered from a remote location, potentially compromising sensitive data or executing arbitrary code.

Affected Systems

The flaw affects NousResearch hermes-agent version 0.8.0. The vulnerable functionality is located in the file gateway/platforms/wecom.py within the WeChat Work Platform Adapter submodule.

Risk and Exploitability

The CVSS score of 6.9 reflects a medium severity impact. EPSS information is missing, but the existence of a public exploit suggests a realistic risk of exploitation. The vulnerability is not listed in the CISA KEV catalog. Attackers can reach the vulnerable endpoint remotely; no special privileges or authentication are required as indicated by the publicly available proof‑of‑concept code. The potential outcome includes reading sensitive system files or injecting arbitrary code through the file system.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to a fixed version of NousResearch hermes-agent that removes the path traversal vulnerability (any release after 0.8.0).
  • Ensure that all file path inputs received by wecom.py are sanitized and validated against a whitelist of allowed directories, rejecting any relative or absolute paths that escape the intended sandbox.
  • Limit external exposure of the WeChat Work Platform Adapter by restricting its network binding to internal interfaces or enforcing strict firewall rules so that only trusted systems can contact it.

Generated by OpenCVE AI on April 29, 2026 at 21:13 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Nousresearch
Nousresearch hermes-agent
Vendors & Products Nousresearch
Nousresearch hermes-agent
Type Values Removed Values Added
Description A vulnerability was identified in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/wecom.py of the component WeChat Work Platform Adapter. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Title NousResearch hermes-agent WeChat Work Platform Adapter wecom.py path traversal
Weaknesses CWE-22
References
Metrics cvssV2_0

{'score': 5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 5.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P'}
Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Apr 29, 2026, 7:28 PM
Reserved
Apr 29, 2026, 10:44 AM

View source JSON

Updated
Apr 29, 2026, 7:28 PM

JSON

Status
Deferred
Published
Apr 29, 2026, 6:16 PM
Modified
Jun 17, 2026, 11:02 AM

View source JSON

No data.

Updated
Apr 29, 2026, 9:15 PM

JSON