Cross-Profile Authorization Bypass in Hermes WebUI by Nesquena

CVE-2026-58174

What is CVE-2026-58174?

The vulnerability in Hermes WebUI allows unauthorized access to user data due to improper session handling. When a session is imported, the system fails to assign a valid profile, resulting in a null profile value. This oversight permits users on the default profile to export session transcripts, potentially gaining access to sensitive files from other profiles. This jeopardizes the application’s intended profile isolation, leading to significant security implications for users.

References