violin v3.2.1

Violin ☤ — Supervised Agentic Hermes Pentest Profile 35 playbooks · 19 references · 14 templates · required execution guard · Hermes-native Violin is a Hermes-native agentic pentest profile for supervised, authorised penetration tests — from reconnaissance through safe exploit validation to...

CVE-2026-37829

creationtimestamp| type| source ---|---|--- 2026-06-18 05:34:14+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3mok45gibfl2q 2026-06-18 14:03:52+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3mokympupar26...

EUVD-2026-37776

Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the getprofilecookie function that accepts unauthenticated profile names from the hermesprofile cookie. An authenticated attacker can forge the hermesprofile cookie value to bypass profile-scoped authorization checks a...