Advisoriesby Ibishermes-agentGHSA-238w-f66p-w349
hermes-agent has an Injection issue
Fix: upgrade to 0.15.0 or later
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.23. Impacted is an unknown function of the file agent/skills_guard.py of the component Skills Guard Multi-Word Prompt Handler. The manipulation of the argument THREAT_PATTERNS leads to injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| hermes-agent PyPI | < 0.15.0 | 0.15.0 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-74
- Also known as
- CVE-2026-9353, PYSEC-2026-2509
- nvd.nist.gov/vuln/detail/CVE-2026-9353
- github.com/NousResearch/hermes-agent/pull/26852
- github.com/NousResearch/hermes-agent/commit/7ebebfbb8d10937cbf2219b4cf5e121b71e67428
- gist.github.com/YLChen-007/82a3539d6358842e69dfaef0a9fcf14a
- github.com/NousResearch/hermes-agent
- vuldb.com/submit/812216
- vuldb.com/vuln/365316
- vuldb.com/vuln/365316/cti
More hermes-agent advisories
All hermes-agent
hermes-agent has an Uncontrolled Resource Consumption issueCVE-2026-10224no fix yethermes-agent has an Injection issueCVE-2026-10221no fix yethermes-agent has an Injection issueCVE-2026-10222fixed in 0.18.0hermes-agent has an Incorrect ComparisonCVE-2026-9369fixed in 0.15.0hermes-agent has a sandbox issueCVE-2026-9368fixed in 0.11.0hermes-agent has an Injection issueCVE-2026-9366fixed in 0.15.0