CVE-2026-9352

A weakness has been identified in NousResearch hermes-agent up to 2026.4.23. This issue affects the function _make_run_env of the file tools/environments/local.py of the component Messaging Gateway Handler. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://gist.github.com/YLChen-007/760b3940f708990e535214529c0c7a27
https://vuldb.com/submit/812215
https://vuldb.com/vuln/365315
https://vuldb.com/vuln/365315/cti

Configurations

No configuration.

History

23 Jul 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) Se ha identificado una debilidad en NousResearch hermes-agent hasta 2026.4.23. Este problema afecta a la función _make_run_env del archivo tools/environments/local.py del componente Gestor de Pasarela de Mensajería. La ejecución de una manipulación puede conducir a la revelación de información. El ataque puede ser lanzado de forma remota. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques. Se contactó al proveedor con antelación sobre esta revelación, pero no respondió de ninguna manera.

24 May 2026, 05:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-24 05:16

Updated : 2026-07-23 11:10

NVD link : CVE-2026-9352

Mitre link : CVE-2026-9352

CVE.ORG link : CVE-2026-9352

JSON object : View

Products Affected

No product.

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-284

Improper Access Control

{"id": "CVE-2026-9352", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-9352", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-29T18:15:23.587484Z"}}], "cvssMetricV2": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.5, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "PROOF_OF_CONCEPT", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cna@vuldb.com", "affectedData": [{"cpes": ["cpe:2.3:a:nousresearch:hermes-agent:*:*:*:*:*:*:*:*"], "vendor": "NousResearch", "modules": ["Messaging Gateway Handler"], "product": "hermes-agent", "versions": [{"status": "affected", "version": "2026.4.0"}, {"status": "affected", "version": "2026.4.1"}, {"status": "affected", "version": "2026.4.2"}, {"status": "affected", "version": "2026.4.3"}, {"status": "affected", "version": "2026.4.4"}, {"status": "affected", "version": "2026.4.5"}, {"status": "affected", "version": "2026.4.6"}, {"status": "affected", "version": "2026.4.7"}, {"status": "affected", "version": "2026.4.8"}, {"status": "affected", "version": "2026.4.9"}, {"status": "affected", "version": "2026.4.10"}, {"status": "affected", "version": "2026.4.11"}, {"status": "affected", "version": "2026.4.12"}, {"status": "affected", "version": "2026.4.13"}, {"status": "affected", "version": "2026.4.14"}, {"status": "affected", "version": "2026.4.15"}, {"status": "affected", "version": "2026.4.16"}, {"status": "affected", "version": "2026.4.17"}, {"status": "affected", "version": "2026.4.18"}, {"status": "affected", "version": "2026.4.19"}, {"status": "affected", "version": "2026.4.20"}, {"status": "affected", "version": "2026.4.21"}, {"status": "affected", "version": "2026.4.22"}, {"status": "affected", "version": "2026.4.23"}]}]}], "published": "2026-05-24T05:16:40.180", "references": [{"url": "https://gist.github.com/YLChen-007/760b3940f708990e535214529c0c7a27", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/submit/812215", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/365315", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/365315/cti", "source": "cna@vuldb.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cna@vuldb.com", "description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "A weakness has been identified in NousResearch hermes-agent up to 2026.4.23. This issue affects the function _make_run_env of the file tools/environments/local.py of the component Messaging Gateway Handler. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Se ha identificado una debilidad en NousResearch hermes-agent hasta 2026.4.23. Este problema afecta a la funci\u00f3n _make_run_env del archivo tools/environments/local.py del componente Gestor de Pasarela de Mensajer\u00eda. La ejecuci\u00f3n de una manipulaci\u00f3n puede conducir a la revelaci\u00f3n de informaci\u00f3n. El ataque puede ser lanzado de forma remota. El exploit ha sido puesto a disposici\u00f3n del p\u00fablico y podr\u00eda ser utilizado para ataques. Se contact\u00f3 al proveedor con antelaci\u00f3n sobre esta revelaci\u00f3n, pero no respondi\u00f3 de ninguna manera."}], "lastModified": "2026-07-23T11:10:00.120", "sourceIdentifier": "cna@vuldb.com"}