जमा करें #803270: NousResearch hermes-agent 0.8.0 Path Write Protection Bypassजानकारी

शीर्षकNousResearch hermes-agent 0.8.0 Path Write Protection Bypass
विवरणThe write_file and patch tools in hermes-agent include a sensitive path protection mechanism that blocks writes to system directories (e.g., /etc/, /boot/). However, on macOS, /etc is a symlink to /private/etc. The protection check uses os.path.realpath() to resolve the target path, which transforms /etc/hosts into /private/etc/hosts. Since the blocklist only contains /etc/ (not /private/etc/), the check fails to match, and writes to system configuration files are allowed on macOS.
स्रोत⚠️ https://github.com/NousResearch/hermes-agent/issues/8734
उपयोगकर्ता
 Yu_Bao (UID 89348)
सबमिशन13/04/2026 04:31 AM (2 महीनों पहले)
संयम29/04/2026 12:44 PM (16 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि360121 [NousResearch hermes-agent 0.8.0 tools/file_tools.py _check_sensitive_path अधिकार वृद्धि]
अंक20

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!