CVE-2026-7397 Details
Description
A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function _check_sensitive_path of the file tools/file_tools.py. The manipulation results in symlink following. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.9.0 is able to mitigate this issue. The patch is identified as 311dac197145e19e07df68feba2cd55d896a3cd1. Upgrading the affected component is recommended.
A vulnerability in NousResearch Hermes-Agent version 0.8.0 allows for symbolic link following, bypassing the application's sensitive path write protection on macOS. The issue arises because the application checks paths against a blocklist that does not account for symlinks to private directories. As a result, the 'write_file' and 'patch' tools can modify critical system files, such as '/etc/hosts' and '/etc/sudoers', potentially leading to unauthorized changes in system configuration or privileges.
Users can upgrade to NousResearch Hermes-Agent version 0.9.0 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Apr 29, 2026CISA-ADP
Assessed Apr 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/NousResearch/hermes-agent/ | [email protected] | Vendor |
| https://github.com/NousResearch/hermes-agent/commit/311dac197145e19e07df68feba2cd55d896a3cd1 | [email protected] | Source CodeVendor |
| https://github.com/NousResearch/hermes-agent/issues/8734 | [email protected] | Issue TrackingTechnical DescriptionVendor |
| https://github.com/NousResearch/hermes-agent/pull/8829 | [email protected] | Issue TrackingVendor |
| https://github.com/NousResearch/hermes-agent/releases/tag/v2026.4.13 | [email protected] | Release NotesVendor |
| https://vuldb.com/submit/803270 | [email protected] | Permission Required |
| https://vuldb.com/vuln/360121 | [email protected] | AdvisoryPartial Content |
| https://vuldb.com/vuln/360121/cti | [email protected] | AdvisoryPartial Content |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-59 | Improper Link Resolution Before File Access ('Link Following') | [email protected] |
| CWE-61 | UNIX Symbolic Link (Symlink) Following | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| NousResearch hermes-agent | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 29, 2026 | New CVE Received | [email protected] |