| タイトル | NousResearch hermes-agent 0.18.2 Denial of Service |
|---|
| 説明 | Hermes Agent 0.18.2 has a denial of service vulnerability in the ACP prompt workflow. Additional prompts sent while a session is running are stored in an unbounded queue and later recursively executed as new agent turns.
An attacker with ACP client access can exhaust shared worker, model, and tool execution resources, causing other ACP prompts to become unavailable and potentially increasing provider/API costs. |
|---|
| ソース | ⚠️ https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report |
|---|
| ユーザー | hackerguopeng (UID 99623) |
|---|
| 送信 | 2026年07月08日 10:58 (2 月 ago) |
|---|
| モデレーション | 2026年09月01日 17:48 (2 months later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 397719 [NousResearch hermes-agent 迄 0.18.2 ACP Prompt Workflow acp_adapter/session.py HermesACPAgent.prompt サービス拒否] |
|---|
| ポイント | 19 |
|---|