CVE-2026-18773: NousResearch hermes-agent Quick run.py _check_slash_access authorization

Severity: medium (CVSS 6.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-04 · updated 2026-10-23
Weakness: CWE-285

Description

A vulnerability was detected in NousResearch hermes-agent up to 2026.6.5. Affected by this issue is the function _check_slash_access of the file gateway/run.py of the component Quick Command Handler. The manipulation results in incorrect authorization. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

NousResearch hermes-agent: 2026.6.0, 2026.6.1, 2026.6.2, 2026.6.3, 2026.6.4, 2026.6.5

References

https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645
https://vuldb.com/cve/CVE-2026-18773
https://vuldb.com/submit/856874
https://vuldb.com/vuln/385783
https://vuldb.com/vuln/385783/cti

Get alerted when CVE-2026-18773 or the next vulnerability affects your stack