GitHub Advisoryadvisory · PyPI
GHSA-wm96-9gfh-vvgq hermes-agent has a sandbox issue
MEDIUM
Official page ↗
- Aliases
- CVE-2026-9368
- Ecosystem
- PyPI
- Packages
- hermes-agent
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Weaknesses
- CWE-269, CWE-526
- Reviewed
- 2026-06-30
Affected packages
• PyPI hermes-agent: < 0.11.0 → fixed in 0.11.0
Description
A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This impacts the function execute_code of the file tools/code_execution_tool.py of the component Environment Variable Handler. Such manipulation leads to sandbox issue. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Related
Alias · CVE (1)
- CVE-2026-9368 A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-9368 advisory
- https://github.com/NousResearch/hermes-agent/commit/285bb2b9150b93445e5eded9bc897a4001b66e55 web
- https://gist.github.com/YLChen-007/43c72d19668421abe8ce10f299323a0a web
- https://github.com/NousResearch/hermes-agent package
- https://vuldb.com/submit/812229 web
- https://vuldb.com/vuln/365331 web
- https://vuldb.com/vuln/365331/cti web