CVE-2026-18993 in hermes-agent

Resumen

por MITRE • 2026-08-06

A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/model_tools.py of the component Memory Toolset. The manipulation results in improper access controls. The attack can be executed remotely. The exploit is now public and may be used.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsable: VulDB
• Divulgación: 2026-08-06
• Moderación: aceptado
• Artículo: VDB-386377
• CPE: listo
• CWE: CWE-284 (confirmado)
• Explotación: Descargar
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Actividades: bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-18993
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18993
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-18993/