Skip to content
Threat Feed

Product

Hermes-Agent

1 brief RSS
high advisory

NousResearch hermes-agent OS Command Injection Vulnerability (CVE-2026-9367)

NousResearch hermes-agent up to version 5157f5427f19488b31c6fdebbacd15d798ce7f63 is vulnerable to OS command injection (CVE-2026-9367) in the `detect_dangerous_command` function allowing a remote attacker to execute arbitrary commands.

hermes-agent command-injection vulnerability cve
2r 1t 1c