CVE-2026-14628 NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversal

[
  {
    "vendor": "NousResearch",
    "product": "hermes-agent",
    "versions": [
      {
        "version": "2026.5.0",
        "status": "affected"
      },
      {
        "version": "2026.5.1",
        "status": "affected"
      },
      {
        "version": "2026.5.2",
        "status": "affected"
      },
      {
        "version": "2026.5.3",
        "status": "affected"
      },
      {
        "version": "2026.5.4",
        "status": "affected"
      },
      {
        "version": "2026.5.5",
        "status": "affected"
      },
      {
        "version": "2026.5.6",
        "status": "affected"
      },
      {
        "version": "2026.5.7",
        "status": "affected"
      },
      {
        "version": "2026.5.8",
        "status": "affected"
      },
      {
        "version": "2026.5.9",
        "status": "affected"
      },
      {
        "version": "2026.5.10",
        "status": "affected"
      },
      {
        "version": "2026.5.11",
        "status": "affected"
      },
      {
        "version": "2026.5.12",
        "status": "affected"
      },
      {
        "version": "2026.5.13",
        "status": "affected"
      },
      {
        "version": "2026.5.14",
        "status": "affected"
      },
      {
        "version": "2026.5.15",
        "status": "affected"
      },
      {
        "version": "2026.5.16",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:a:nousresearch:hermes-agent:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "Live Webhook Endpoint"
    ]
  }
]