hermes-agentGHSA-wm96-9gfh-vvgq
hermes-agent has a sandbox issue
Medium7.3CVE-2026-9368 · Published May 26, 2026 · updated Jul 13, 2026
A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This impacts the function execute_code of the file tools/code_execution_tool.py of the component Environment Variable Handler. Such manipulation leads to sandbox issue. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| hermes-agent PyPI | < 0.11.0 | 0.11.0 |
Details and references
More hermes-agent advisories
All hermes-agent| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jun 1 | hermes-agent has an Uncontrolled Resource Consumption issue Medium5.3Jun 1 | Medium5.3 | No fix yet |
| Jun 1 | hermes-agent has an Injection issueMedium7.3Jun 1 | Medium7.3 | No fix yet |
| Jun 1 | hermes-agent has an Injection issueLow5.6Jun 1 | Low5.6 | 0.18.0 |
| May 26 | hermes-agent has an Incorrect ComparisonLow5.3May 26 | Low5.3 | 0.15.0 |
| May 26 | hermes-agent has an Injection issueMedium7.3May 26 | Medium7.3 | 0.15.0 |
| May 26 | hermes-agent has an Injection issueMedium7.3May 26 | Medium7.3 | 0.15.0 |