PT-2026-76865

Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint...

CVE-2026-67918

hermes-studio v0.6.26 contains a directory traversal flaw in the validatePath function of the api/hermes/download endpoint, allowing a remote attacker to read sensitive files outside the intended directory. No exploit code, CVSS score, or patch version is provided in the available documents. Expl...

CVE-2026-67918

Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint...