Authorization Bypass in Nous Research Hermes Agent Webhook Gateway

CVE-2026-114463

What is CVE-2026-114463?

A vulnerability exists in the webhook platform gateway of Nous Research Hermes Agent, where the session identifier, constructed as webhook:{route_name}:{delivery_id}, allows an attacker to manipulate the route name. By including a colon (:) in the route name, the system incorrectly resolves to a higher-privileged route. This can enable remote attackers who possess the target HMAC to access toolsets meant for privileged users, bypassing the intended authorization mechanism.

References