CVE-2026-114463 Details
Description
The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{delivery_id} and re-derives the authorizing route by splitting that string, so a route name containing a ":" resolves toolset authorization to a different, higher-privileged prefix route than the one authenticated, which allows a remote attacker with the target HMAC to gain that higher-privileged route's toolsets.
A vulnerability in the webhook platform gateway of Nous Research Hermes Agent in versions through 2026.8.19 allows for an authorization bypass that can lead to privilege escalation. The issue arises because the session chat ID is constructed in a way that can misroute toolset authorizations. When a route name includes a colon, the toolsets are derived from a different, potentially higher-privileged route than intended. This flaw enables a remote attacker with knowledge of the target HMAC to access elevated toolsets, such as terminal and file access, on the agent host.
Users can upgrade to Hermes Agent version 0.22.2 or later, which addresses this vulnerability. If an upgrade is not possible, route names should be changed to remove any colons, and agent logs should be reviewed for any sessions that may have misused tools due to this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 21, 2026CISA-ADP
Assessed Oct 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/pinarsadioglu/security-advisories/blob/main/webhook-route-authz-bypass.md | CISA-ADP | AdvisoryExploitRemedy |
| https://github.com/NousResearch/hermes-agent/pull/115285 | [email protected] | Source CodeVendor |
| https://github.com/NousResearch/hermes-agent/releases/tag/v0.22.2 | [email protected] | Release NotesVendor |
| https://github.com/pinarsadioglu/security-advisories/blob/main/webhook-route-authz-bypass.md | [email protected] | AdvisoryExploitRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-863 | Incorrect Authorization | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| NousResearch Hermes Agent | <= 2026.8.19 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 30, 2026 | CVE Modified | CISA-ADP |
| Oct 21, 2026 | New CVE Received | [email protected] |