Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r7hr-pvjh-r4p3

Опубликовано: 27 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.9
CVSS3: 5.6

Описание

A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function _check_auth of the file gateway/platforms/api_server.py of the component API_SERVER_KEY Handler. The manipulation leads to improper authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a pull request but has not reacted yet.

A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function _check_auth of the file gateway/platforms/api_server.py of the component API_SERVER_KEY Handler. The manipulation leads to improper authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a pull request but has not reacted yet.

EPSS

Процентиль: 29%
0.0036
Низкий

2.9 Low

CVSS4

5.6 Medium

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 5.6
nvd
3 месяца назад

A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function _check_auth of the file gateway/platforms/api_server.py of the component API_SERVER_KEY Handler. The manipulation leads to improper authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a pull request but has not reacted yet.

EPSS

Процентиль: 29%
0.0036
Низкий

2.9 Low

CVSS4

5.6 Medium

CVSS3

Дефекты

CWE-287