PT-2026-55694 · Nousresearch · Hermes-Agent

Eric-A · Publicado 2026-07-04 · Atualizado 2026-07-04 · CVE-2026-14625

Mitre

CVSS v3.1

6.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A security flaw has been discovered in NousResearch hermes-agent up to 0.15.2. The affected element is the function shell.exec of the file tui gateway/server.py. The manipulation results in protection mechanism failure. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Correção

Protection Mechanism Failure

Enumeração de Fraquezas

CWE-693

Identificadores relacionados

CVE-2026-14625

Produtos afetados

Hermes-Agent

Referências · 6

• 🔥 https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024 · Exploit
• https://vuldb.com/vuln/376141/cti · Nota
• https://vuldb.com/vuln/376141 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-14625 · Nota de Segurança
• https://vuldb.com/submit/845595 · Nota
• https://vuldb.com/cve/CVE-2026-14625 · Nota