nousresearch
AI / MLcommercial
Top products
Latest CVEs
The 15 most recently published vulnerabilities affecting nousresearch.
- CVE-2026-18993NousResearch hermes-agent Memory Toolset model_tools.py access control6.3
- CVE-2026-18976NousResearch hermes-agent disabled_toolsets agent_init.py get_tool_definitions privileges assignment6.3
- CVE-2026-18775NousResearch hermes-agent Browser Tooling browser_tool.py browser_snapshot server-side request forgery6.3
- CVE-2026-18774NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgery6.3
- CVE-2026-18773NousResearch hermes-agent Quick run.py _check_slash_access authorization6.3
- CVE-2026-17432NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control5.0
- CVE-2026-15311NousResearch hermes-agent Matrix Adapter matrix.py MatrixAdapter._markdown_to_html cross site scripting3.5
- CVE-2026-14783NousResearch hermes-agent skills_tool.py skill_view path traversal4.3
- CVE-2026-14628NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversal5.3
- CVE-2026-14627NousResearch hermes-agent Discord Platform Integration discord.py DiscordAdapter._is_allowed_user improper authentication5.6
- CVE-2026-14626NousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation denial of service4.3
- CVE-2026-14625NousResearch hermes-agent server.py shell.exec protection mechanism6.3
- CVE-2026-14617NousResearch hermes-agent Streaming Reasoning Tag Filter stream_consumer.py GatewayStreamConsumer._filter_and_accumulate case sensitivity3.1
- CVE-2026-53870Hermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store Files5.5
- CVE-2026-53869Hermes Agent < 0.16.0 - DNS Rebinding Bypass via WebSocket Endpoints7.5