Authorization Bypass Vulnerability in Hermes WebUI Product by Nesquena

CVE-2026-55198

What is CVE-2026-55198?

The Hermes WebUI platform prior to version 0.51.443 is susceptible to an authorization bypass vulnerability involving the session export endpoint. This flaw permits authenticated users to illicitly access session data from other user profiles. The vulnerability arises due to inadequate verification of profile ownership in the _handle_session_export function, allowing attackers to potentially exfiltrate sensitive session transcripts by either guessing or knowing session identifiers. This poses a significant risk, as it undermines user privacy and data integrity.

References