Path Traversal Vulnerability in Hermes WebUI by Nesquena

CVE-2026-22677

What is CVE-2026-22677?

Hermes WebUI versions before 0.51.44 have a path traversal vulnerability that lets authenticated attackers read any file accessible to the WebUI process. By manipulating the session import endpoint with a crafted session and an unrestricted workspace value, attackers can input a blocked filesystem root. This enables them to exploit relative paths in the session file API, potentially leading to unauthorized file access. Users are advised to update to the latest version for security enhancements.

References