Workspace Boundary Bypass in Hermes WebUI Affects Network Security

CVE-2026-49957

What is CVE-2026-49957?

Hermes WebUI, prior to version 0.51.296, is subject to a workspace boundary bypass vulnerability. This flaw allows authenticated attackers to exploit the workspace resolution logic in the SSH/remote terminal profile, leading to potential unauthorized access to sensitive system files. By manipulating the remote terminal working directory to point to sensitive system paths like /etc, attackers can bypass checks that are meant to restrict access. This oversight stems from an early return in the path validation process, enabling attackers to read local system files without triggering security guards.

References