CVE-2026-82020

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-82020
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82020.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-82020
Published
2026-08-28T18:47:06Z
Modified
2026-10-28T02:30:39Z
Severity
  • 7.6 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write Tool
Details

Hermes Agent 0.16.0 prior to 0.17.0 contains an improper path restriction vulnerability that allows attackers who can influence ingested message content to overwrite the credential store by bypassing sensitive-path guards that excluded the auth.json file. Attackers can craft malicious messages directing the agent's file-write tooling to overwrite the credential store without triggering any path-based protection, enabling credential tampering or unauthorized access.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-552"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82020.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "0.16.0"
                        },
                        {
                            "fixed": "0.17.0"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/nousresearch/hermes-agent

Affected ranges

Type
GIT
Repo
https://github.com/nousresearch/hermes-agent
Events
Introduced
3c231eb3979ab9c57d5cd6d02f1d577a3b718b43
Fixed
2bd1977d8fad185c9b4be47884f7e87f1add0ce3
Fixed
da28d5d113956dcf803d5cff552a120740a96a59
Fixed
2b67e96aec2aa2abd5e94b544cda8e564c75f9f5
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "2026.6.5"
                },
                {
                    "fixed": "2026.6.19"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "original_tag": "v2026.6.19",
            "range": [
                {
                    "fixed": "2bd1977d8fad185c9b4be47884f7e87f1add0ce3"
                }
            ],
            "source": "REFERENCES_TAG"
        },
        {
            "range": [
                {
                    "fixed": "da28d5d113956dcf803d5cff552a120740a96a59"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "2b67e96aec2aa2abd5e94b544cda8e564c75f9f5"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

v2026.*
v2026.6.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82020.json"