CVE-2026-6829 Details

A trust-boundary failure vulnerability has been identified in nesquena hermes-webui, specifically in version 0.50.33 and prior. This vulnerability allows authenticated attackers to manipulate workspace path parameters in several API endpoints, including '/api/session/new', '/api/session/update', '/api/chat/start', and '/api/workspaces/add'. By doing so, attackers can redirect a session workspace to any existing directory on the disk, bypassing the intended trusted root. Once the workspace is redirected, attackers can use standard file read and write APIs to access or modify files outside the designated workspace boundary, all within the permissions of the hermes-webui process.

Users are advised to update to hermes-webui version 0.50.34, which includes a patch that restricts session workspaces to trusted roots, preventing the manipulation of workspace paths to access arbitrary directories.