What’s Vulnerable › Vulnerabilities

CVE-2026-82020: Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write Tool

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-28 · updated 2026-09-08
• Weakness: CWE-552

Description

Hermes Agent 0.16.0 prior to 0.17.0 contains an improper path restriction vulnerability that allows attackers who can influence ingested message content to overwrite the credential store by bypassing sensitive-path guards that excluded the auth.json file. Attackers can craft malicious messages directing the agent's file-write tooling to overwrite the credential store without triggering any path-based protection, enabling credential tampering or unauthorized access.

Affected products

• NousResearch hermes-agent: from 0.16.0 before 0.17.0; from 2026.6.5 before 2026.6.19 — fixed in 0.17.0, 2026.6.19

How to fix

Upgrade to a fixed version: NousResearch hermes-agent 0.17.0, 2026.6.19. Check the vendor advisory for mitigations.

References

• https://github.com/NousResearch/hermes-agent/commit/2b67e96aec2aa2abd5e94b544cda8e564c75f9f5
• https://github.com/NousResearch/hermes-agent/commit/da28d5d113956dcf803d5cff552a120740a96a59
• https://github.com/NousResearch/hermes-agent/pull/45821
• https://github.com/NousResearch/hermes-agent/releases/tag/v2026.6.19
• https://www.vulncheck.com/advisories/hermes-agent-credential-store-overwrite-via-file-write-tool

Get alerted when CVE-2026-82020 or the next vulnerability affects your stack