Advisoriesby Ibishermes-agentGHSA-99f9-j8r3-p853
hermes-agent: insecure default permissions
Fix: upgrade to 0.16.0 or later
Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attackers with local filesystem access can read these files directly to obtain sensitive data including conversation history, tool payloads, prompts, and per-route HMAC secrets.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| hermes-agent PyPI | < 0.16.0 | 0.16.0 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-276
- Also known as
- CVE-2026-53870, PYSEC-2026-2511
- nvd.nist.gov/vuln/detail/CVE-2026-53870
- github.com/NousResearch/hermes-agent/pull/30917
- github.com/NousResearch/hermes-agent/pull/31469
- github.com/NousResearch/hermes-agent/commit/3bace071bfadf2d2bec2ee048471a31ec920e3e8
- github.com/NousResearch/hermes-agent
- github.com/NousResearch/hermes-agent/releases/tag/v2026.6.5
- www.vulncheck.com/advisories/hermes-agent-sensitive-file-permission-vulnerability-in-store-files
More hermes-agent advisories
All hermes-agent
hermes-agent: missing authenticationCVE-2026-53869fixed in 0.16.0hermes-agent has an Injection issueCVE-2026-10223fixed in 0.15.0hermes-agent has an Uncontrolled Resource Consumption issueCVE-2026-10224no fix yethermes-agent has an Injection issueCVE-2026-10222fixed in 0.18.0hermes-agent has an Injection issueCVE-2026-10221no fix yethermes-agent has an Incorrect ComparisonCVE-2026-9369fixed in 0.15.0