Nesquena vulnerabilities
We track 7 vulnerabilities in Nesquena products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on July 9, 2026.
Latest Nesquena vulnerabilities
- 9.8 Critical severity
hermes-webui: Missing Authentication for Critical Functionality
Hermes WebUI before 0.51.788 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by accessing the embedded terminal API endpoints without credentials. Attackers can create a session,
- 9.1 Critical severity
hermes-webui: Use of Less Trusted Source
Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by supplying a spoofed X-Forwarded-For header with a loopback address.
- 8.1 High severity
hermes-webui: Reliance on Cookies without Validation and Integrity Checking
Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the get_profile_cookie() function that accepts unauthenticated profile names from the hermes_profile cookie. An authenticated attacker can forge the hermes_profile cookie value to b
- 9.4 Critical severity
hermes-webui: Missing Authentication for Critical Functionality
Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the _set_password parameter to the settings API endpoint without any network origin restri
- 8.8 High severity
hermes-webui: Improper Neutralization of Special Elements used in an OS Command
Hermes WebUI before version 0.51.311 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by placing malicious executable Git configuration in a workspace repository's .git/config file. Attackers can
- 7.7 High severity
hermes-webui: Improper Limitation of a Pathname to a Restricted Directory
Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the SSH/remote terminal profile workspace resolution logic withi
- 8.1 High severity
hermes-webui: Improper Limitation of a Pathname to a Restricted Directory
Hermes WebUI contains an arbitrary file deletion vulnerability in the /api/session/delete endpoint that allows authenticated attackers to delete files outside the session directory by supplying an absolute path or path traversal payload in the session_id param