hermes-agentGHSA-99f9-j8r3-p853
hermes-agent: insecure default permissions
Medium5.5CVE-2026-53870 · Published Jun 17, 2026 · updated Jul 13, 2026
Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attackers with local filesystem access can read these files directly to obtain sensitive data including conversation history, tool payloads, prompts, and per-route HMAC secrets.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| hermes-agent PyPI | < 0.16.0 | 0.16.0 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-276
- Also known as
- CVE-2026-53870, PYSEC-2026-2511
- nvd.nist.gov/vuln/detail/CVE-2026-53870
- github.com/NousResearch/hermes-agent/pull/30917
- github.com/NousResearch/hermes-agent/pull/31469
- github.com/NousResearch/hermes-agent/commit/3bace071bfadf2d2bec2ee048471a31ec920e3e8
- github.com/NousResearch/hermes-agent
- github.com/NousResearch/hermes-agent/releases/tag/v2026.6.5
- www.vulncheck.com/advisories/hermes-agent-sensitive-file-permission-vulnerability-in-store-files
More hermes-agent advisories
All hermes-agent| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jun 17 | hermes-agent: missing authentication High7.5Jun 17 | High7.5 | 0.16.0 |
| Jun 1 | hermes-agent has an Injection issueLow6.3Jun 1 | Low6.3 | 0.15.0 |
| Jun 1 | hermes-agent has an Uncontrolled Resource Consumption issueMedium5.3Jun 1 | Medium5.3 | No fix yet |
| Jun 1 | hermes-agent has an Injection issueLow5.6Jun 1 | Low5.6 | 0.18.0 |
| Jun 1 | hermes-agent has an Injection issueMedium7.3Jun 1 | Medium7.3 | No fix yet |
| May 26 | hermes-agent has an Incorrect ComparisonLow5.3May 26 | Low5.3 | 0.15.0 |