CVE-2026-7397
NousResearch hermes-agent file_tools.py _check_sensitive_path symlink
- State
- Published
- Severity
- 4.8 Medium
- Published
- Apr 29, 2026
- Updated
- Apr 30, 2026
- Reserved
- Apr 29, 2026
Description
A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function _check_sensitive_path of the file tools/file_tools.py. The manipulation results in symlink following. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.9.0 is able to mitigate this issue. The patch is identified as 311dac197145e19e07df68feba2cd55d896a3cd1. Upgrading the affected component is recommended.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 4.4 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C | VulDB |
| 3.0 | 4.4 Medium | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C | VulDB |
| 2.0 | 3.2 Low | AV:L/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:OF/RC:C | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
hermes-agentNousResearch |
|
References
- VDB-360121 | NousResearch hermes-agent file_tools.py _check_sensitive_path symlinkvdb-entrytechnical-description
- VDB-360121 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #803270 | NousResearch hermes-agent 0.8.0 Path Write Protection Bypassthird-party-advisory
- https://github.com/NousResearch/hermes-agent/issues/8734exploitissue-tracking
- https://github.com/NousResearch/hermes-agent/pull/8829issue-trackingpatch
- https://github.com/NousResearch/hermes-agent/commit/311dac197145e19e07df68feba2cd55d896a3cd1patch
- https://github.com/NousResearch/hermes-agent/releases/tag/v2026.4.13patch
- https://github.com/NousResearch/hermes-agent/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.