GHSA-wm96-9gfh-vvgq

Source

https://github.com/advisories/GHSA-wm96-9gfh-vvgq

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-wm96-9gfh-vvgq/GHSA-wm96-9gfh-vvgq.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-wm96-9gfh-vvgq

Aliases

CVE-2026-9368
PYSEC-2026-2515

Published

2026-05-26T13:30:32Z

Modified

2026-07-13T16:43:25Z

Severity

7.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

hermes-agent has a sandbox issue

Details

A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This impacts the function execute_code of the file tools/code_execution_tool.py of the component Environment Variable Handler. Such manipulation leads to sandbox issue. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cwe_ids":  [
        "CWE-269",
        "CWE-526"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-06-30T15:37:24Z",
    "nvd_published_at":  "2026-05-24T09:16:32Z",
    "severity":  "MODERATE"
}

References

Affected packages

PyPI / hermes-agent

Package

Name: hermes-agent; View open source insights on deps.dev
Purl: pkg:pypi/hermes-agent

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.11.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-wm96-9gfh-vvgq/GHSA-wm96-9gfh-vvgq.json"