Medium 6.8Published Aug 28, 2026

CVE-2026-82020Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write Tool

Updated under an hour ago (2026-10-19 07:10 UTC)

Does this affect you?

It affects NousResearch hermes-agent. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for NousResearch hermes-agent

Exploited in the last 30 days

Hermes Agent 0.16.0 prior to 0.17.0 contains an improper path restriction vulnerability that allows attackers who can influence ingested message content to overwrite the credential store by bypassing sensitive-path guards that excluded the auth.json file. Attackers can craft malicious messages directing the agent's file-write tooling to overwrite the credential store without triggering any path-based protection, enabling credential tampering or unauthorized access.

CVSS: 6.8 MEDIUM (v3.1, CNA)CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Weakness (CWE): CWE-552
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulnCheck
NVD analysis: Deferred
Record last updated: Sep 1, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

NousResearch hermes-agent nousresearch:hermes_agent (from the name)	from 0.16.0 before 0.17.0; from 2026.6.5 before 2026.6.19	CNA record

References

https://github.com/NousResearch/hermes-agent/releases/tag/v2026.6.19release-notes
https://github.com/NousResearch/hermes-agent/pull/45821issue-tracking, patch
https://github.com/NousResearch/hermes-agent/commit/da28d5d113956dcf803d5cff552a120740a96a59patch
https://github.com/NousResearch/hermes-agent/commit/2b67e96aec2aa2abd5e94b544cda8e564c75f9f5patch
https://www.vulncheck.com/advisories/hermes-agent-credential-store-overwrite-via-file-write-toolthird-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.