CVE-2026-18993 in hermes-agent

Résumé

par MITRE • 06/08/2026

A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/model_tools.py of the component Memory Toolset. The manipulation results in improper access controls. The attack can be executed remotely. The exploit is now public and may be used.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsable: VulDB
• Divulgation: 06/08/2026
• Modérer: accepté
• Entrée: VDB-386377
• CPE: prêt
• CWE: CWE-284 (confirmé)
• Exploitation: Télécharger
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: non
• Activités: faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-18993
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18993
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-18993/