Hermes Agent vulnerabilities

1 known vulnerability in Hermes Agent from Nous Research. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Hermes Agent: Incorrect Authorization

  CVE-2026-114463Oct 21, 2026Nous Research

  The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{delivery_id} and re-derives the authorizing route by splitting that string, so a route name containing a ":" resolves toolset authorization