Lucene search
+L

275 matches found

NVD
NVD
added 2026/04/27 10:16 a.m.9 views

CVE-2026-7112

A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function checkauth of the file gateway/platforms/apiserver.py of the component APISERVERKEY Handler. The manipulation leads to improper authentication. The attack can be initiated remotely. Th...

6.3CVSS0.0036EPSS
SaveExploits0References6
CVE
CVE
added 2026/04/27 10:00 a.m.59 views

CVE-2026-7113

CVE-2026-7113 affects NousResearch hermes-agent 0.8.0, specifically the Webhooks Endpoint in gateway/platforms/webhook.py. The issue arises from manipulating the argument _INSECURE_NO_AUTH, resulting in missing authentication and enabling a remote attack. The description notes high attack complex...

6.3CVSS5.2AI score0.00362EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/04/27 10:00 a.m.14 views

EUVD-2026-25818

A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/webhook.py of the component Webhooks Endpoint. The manipulation of the argument INSECURENOAUTH results in missing authentication. The attack can be...

6.3CVSS4.6AI score0.00362EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/04/27 10:00 a.m.6 views

CVE-2026-7113 NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication

A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/webhook.py of the component Webhooks Endpoint. The manipulation of the argument INSECURENOAUTH results in missing authentication. The attack can be...

6.3CVSS5.2AI score0.00362EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/04/27 10:00 a.m.44 views

CVE-2026-7113 NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication

A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/webhook.py of the component Webhooks Endpoint. The manipulation of the argument INSECURENOAUTH results in missing authentication. The attack can be...

6.3CVSS0.00362EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/04/27 10:00 a.m.8 views

CVE-2026-7113

A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/webhook.py of the component Webhooks Endpoint. The manipulation of the argument INSECURENOAUTH results in missing authentication. The attack can be...

6.3CVSS5.1AI score0.00362EPSS
SaveExploits0References6Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/27 9:45 a.m.6 views

CVE-2026-7112 NousResearch hermes-agent API_SERVER_KEY api_server.py _check_auth improper authentication

A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function checkauth of the file gateway/platforms/apiserver.py of the component APISERVERKEY Handler. The manipulation leads to improper authentication. The attack can be initiated remotely. Th...

6.3CVSS5AI score0.0036EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/04/27 9:45 a.m.41 views

CVE-2026-7112 NousResearch hermes-agent API_SERVER_KEY api_server.py _check_auth improper authentication

A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function checkauth of the file gateway/platforms/apiserver.py of the component APISERVERKEY Handler. The manipulation leads to improper authentication. The attack can be initiated remotely. Th...

6.3CVSS0.0036EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/04/27 9:45 a.m.5 views

CVE-2026-7112

A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function checkauth of the file gateway/platforms/apiserver.py of the component APISERVERKEY Handler. The manipulation leads to improper authentication. The attack can be initiated remotely. Th...

6.3CVSS5AI score0.0036EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/04/27 9:45 a.m.15 views

EUVD-2026-25812

A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function checkauth of the file gateway/platforms/apiserver.py of the component APISERVERKEY Handler. The manipulation leads to improper authentication. The attack can be initiated remotely. Th...

6.3CVSS5.1AI score0.0036EPSS
SaveExploits0References6
CVE
CVE
added 2026/04/27 9:45 a.m.47 views

CVE-2026-7112

CVE-2026-7112 affects NousResearch hermes-agent 0.8.0. The vulnerability is in the API_SERVER_KEY Handler’s function _check_auth within gateway/platforms/api_server.py, causing improper authentication. It can be triggered remotely, with a high attack complexity and partial confidentiality/integri...

6.3CVSS5.2AI score0.0036EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/27 12:00 a.m.23 views

Hermes Agent 授权问题漏洞

Hermes Agent is an AI agent tool developed by Nous Research, featuring a self-learning mechanism. Version 0.8.0 of Hermes Agent contains an authorization vulnerability. This vulnerability stems from the checkauth function in the APISERVERKEY Handler component’s gateway/platforms/apiserver.py file...

6.3CVSS6.2AI score0.0036EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/27 12:00 a.m.17 views

Hermes Agent 授权问题漏洞

Hermes Agent is an AI agent tool developed by Nous Research, featuring a self-learning mechanism. Version 0.8.0 of Hermes Agent contains an authorization vulnerability. This vulnerability arises from an unknown function in the Webhooks Endpoint component’s gateway/platforms/webhook.py file, which...

6.3CVSS6.2AI score0.00362EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/27 12:00 a.m.29 views

PT-2026-35390

A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function check auth of the file gateway/platforms/api server.py of the component API SERVER KEY Handler. The manipulation leads to improper authentication. The attack can be initiated remotely...

6.3CVSS5AI score0.0036EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/04/27 12:00 a.m.23 views

PT-2026-35395

Name of the Vulnerable Software and Affected Versions NousResearch hermes-agent version 0.8.0 Description A flaw in the Webhooks Endpoint component, specifically within the gateway/platforms/webhook.py file, allows for missing authentication. This occurs through the manipulation of the INSECURE N...

6.3CVSS6AI score0.00362EPSS
SaveExploits0References12
Rows per page
Query Builder