Lucene search
+L

6 matches found

PyPA
PyPA
•added 2026/08/04 11:34 a.m.•34 views

hermes-agent has an Injection issue

A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function scanmemorycontent of the file tools/memorytool.py. This manipulation causes injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used f...

6.5CVSS6.2AI score0.00228EPSS
SaveExploits0References10Affected Software1
OSV
OSV
•added 2026/08/04 11:34 a.m.•14 views

PYSEC-2026-3575 hermes-agent has an Injection issue

A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function scanmemorycontent of the file tools/memorytool.py. This manipulation causes injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used f...

6.3CVSS6.2AI score0.00228EPSS
SaveExploits0References10
OSV
OSV
•added 2026/06/01 6:30 a.m.•12 views

GHSA-33QV-C5QM-799V hermes-agent has an Injection issue

A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function scanmemorycontent of the file tools/memorytool.py. This manipulation causes injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used f...

6.3CVSS6.3AI score0.00228EPSS
SaveExploits0References8
CVE
CVE
•added 2026/06/01 4:15 a.m.•112 views

CVE-2026-10223

CVE-2026-10223 affects NousResearch hermes-agent up to version 2026.4.30. The weakness is in tools/memory_tool.py function _scan_memory_content, enabling remote injection. CVSS metrics indicate NETWORK access, LOW attack complexity, and LOW privileges required, with PROOF-OF-CONCEPT exploit matur...

6.5CVSS6.3AI score0.00228EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/06/01 4:15 a.m.•68 views

EUVD-2026-33556

A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function scanmemorycontent of the file tools/memorytool.py. This manipulation causes injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used f...

6.5CVSS5.6AI score0.00228EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•63 views

Hermes Agent 安全漏洞

Hermes Agent is an AI agent tool developed by Nous Research, featuring a self-learning mechanism. Versions of Hermes Agent prior to 2026.4.30 contained a security vulnerability, which was caused by a problem with the scanmemorycontent function in the tools/memorytool.py file. This vulnerability...

6.5CVSS6.4AI score0.00228EPSS
SaveExploits0References5
Rows per page
Query Builder