CVE-2026-53870 Details
Description
Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attackers with local filesystem access can read these files directly to obtain sensitive data including conversation history, tool payloads, prompts, and per-route HMAC secrets.
A vulnerability exists in Hermes Agent versions prior to 0.16.0, where the application creates two files, 'response_store.db' and 'webhook_subscriptions.json', with world-readable permissions. This exposure allows local users to access sensitive information such as conversation history, tool payloads, prompts, and per-route HMAC secrets. The issue arises from an incorrect default file permission setting, which can be exploited by attackers with local filesystem access to read the files and obtain the confidential data they contain.
Users can update to Hermes Agent version 0.16.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jun 17, 2026CISA-ADP
Assessed Jun 17, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/NousResearch/hermes-agent/pull/30917 | CISA-ADP | Issue TrackingVendor |
| https://github.com/NousResearch/hermes-agent/commit/3bace071bfadf2d2bec2ee048471a31ec920e3e8 | [email protected] | Source CodeVendor |
| https://github.com/NousResearch/hermes-agent/pull/30917 | [email protected] | Issue TrackingVendor |
| https://github.com/NousResearch/hermes-agent/pull/31469 | [email protected] | Issue TrackingVendor |
| https://github.com/NousResearch/hermes-agent/releases/tag/v2026.6.5 | [email protected] | Release NotesVendor |
| https://www.vulncheck.com/advisories/hermes-agent-sensitive-file-permission-vulnerability-in-store-files | [email protected] | AdvisoryBundleRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-276 | Incorrect Default Permissions | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| NousResearch Hermes Agent | < 0.16.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | New CVE Received | [email protected] |