CyberSecBulletin

Hermes-webui vulnerabilities

We track 1 vulnerability in Hermes-webui products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 17, 2026.

1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score

Latest Hermes-webui vulnerabilities

  • 9.1 Critical severity

    hermes-webui: Missing Authentication for Critical Functionality

    CVE-2026-55196Hermes-webui

    Hermes WebUI before 0.51.409 contains an authentication bypass vulnerability in passkey registration endpoints that allows unauthenticated remote attackers to register arbitrary passkeys. When HERMES_WEBUI_PASSKEY=1 is enabled with no existing credentials, POS