Get-hermes vulnerabilities
We track 1 vulnerability in Get-hermes products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 21, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Get-hermes vulnerabilities
- 8.1 High severity
hermes-webui: Improper Limitation of a Pathname to a Restricted Directory
Hermes WebUI contains an arbitrary file deletion vulnerability in the /api/session/delete endpoint that allows authenticated attackers to delete files outside the session directory by supplying an absolute path or path traversal payload in the session_id param