VulnSea

hermes-agent vulnerabilities

CVEs whose affected-version data names the hermes-agent package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

10 CVEsRSS

CVE-2026-53870Medium· 5.5
3mo ago

Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)

Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)

▾ Sunlithermes-agent · hermes-agentEPSS 0.11%via GHSA
CVE-2026-53869High· 7.5
3mo ago

Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation

Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation

▾ Twilighthermes-agent · hermes-agentEPSS 0.59%via GHSA
CVE-2026-10224Medium· 5.3
3mo ago

hermes-agent has an Uncontrolled Resource Consumption issue

hermes-agent has an Uncontrolled Resource Consumption issue

▾ Sunlithermes-agent · hermes-agentEPSS 0.37%via OSV
CVE-2026-10223Medium· 6.3
3mo ago

hermes-agent has an Injection issue

hermes-agent has an Injection issue

▾ Sunlithermes-agent · hermes-agentEPSS 0.23%via OSV
CVE-2026-10221High· 7.3
3mo ago

hermes-agent has an Injection issue

hermes-agent has an Injection issue

▾ Twilighthermes-agent · hermes-agentEPSS 0.30%via OSV
CVE-2026-10222Medium· 5.6
3mo ago

hermes-agent has an Injection issue

hermes-agent has an Injection issue

▾ Sunlithermes-agent · hermes-agentEPSS 0.27%via OSV
CVE-2026-9368High· 7.3
3mo ago

hermes-agent has a sandbox issue

hermes-agent has a sandbox issue

▾ Twilighthermes-agent · hermes-agentEPSS 0.38%via OSV
CVE-2026-9366High· 7.3
3mo ago

hermes-agent has an Injection issue

hermes-agent has an Injection issue

▾ Twilighthermes-agent · hermes-agentEPSS 0.30%via OSV
CVE-2026-9369Medium· 5.3
3mo ago

hermes-agent has an Incorrect Comparison

hermes-agent has an Incorrect Comparison

▾ Sunlithermes-agent · hermes-agentEPSS 0.23%via OSV
CVE-2026-9353High· 7.3
3mo ago

hermes-agent has an Injection issue

hermes-agent has an Injection issue

▾ Twilighthermes-agent · hermes-agentEPSS 0.30%via OSV
hermes-agent vulnerabilities (CVEs) · VulnSea