CVE-2026-18993 in hermes-agent

Tóm tắt

Bởi MITRE • 06/08/2026

A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/model_tools.py of the component Memory Toolset. The manipulation results in improper access controls. The attack can be executed remotely. The exploit is now public and may be used.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• chịu trách nhiệm: VulDB
• Tiết lộ: 06/08/2026
• Kiểm duyệt: được chấp nhận
• mục: VDB-386377
• CPE: sẵn sàng
• CWE: CWE-284 (Đã xác nhận)
• Khai thác: Tải xuống
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: không
• Các hoạt động: thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-18993
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18993
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-18993/