| عنوان | NousResearch hermes-agent 0.18.2 Denial of Service |
|---|
| الوصف | Hermes Agent 0.18.2 has a denial of service vulnerability in the ACP prompt workflow. Additional prompts sent while a session is running are stored in an unbounded queue and later recursively executed as new agent turns.
An attacker with ACP client access can exhaust shared worker, model, and tool execution resources, causing other ACP prompts to become unavailable and potentially increasing provider/API costs. |
|---|
| المصدر | ⚠️ https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report |
|---|
| المستخدم | hackerguopeng (UID 99623) |
|---|
| ارسال | 08/07/2026 10:58 AM (2 أشهر منذ) |
|---|
| الاعتدال | 01/09/2026 05:48 PM (2 months later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 397719 [NousResearch hermes-agent حتى 0.18.2 ACP Prompt Workflow acp_adapter/session.py HermesACPAgent.prompt الحرمان من الخدمة] |
|---|
| النقاط | 19 |
|---|