CVE-2026-18993 in hermes-agent

الملخص

بحسب MITRE • 06/08/2026

A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/model_tools.py of the component Memory Toolset. The manipulation results in improper access controls. The attack can be executed remotely. The exploit is now public and may be used.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• مسؤول: VulDB
• إفشاء: 06/08/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-386377
• CPE: جاهز
• CWE: CWE-284 (مؤكد)
• استغلال: تحميل
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-18993
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18993
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-18993/