Authorization Bypass in NousResearch Hermes-Agent 0.18.0
CVE-2026-85105

6.9MEDIUM

Key Information:

Vendor

Nousresearch

Status
Hermes-agent
Vendor
CVE Published:
3 September 2026

What is CVE-2026-85105?

A vulnerability exists in the NousResearch hermes-agent version 0.18.0, specifically within the session management component. The flaw arises from improper handling of the session_id argument in the function _sess_nowait located in s71.py. This misconfiguration allows attackers to exploit the system remotely, leading to potential unauthorized access. Despite being informed about this issue, the vendor has not provided an acknowledgment or resolution.

Affected Version(s)

hermes-agent 0.18.0

References

https://vuldb.com/vuln/398312
vdb-entrytechnical-description
https://vuldb.com/vuln/398312/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-85105
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

KendrickZou (VulDB User)
VulDB CNA Team
.