CVE-2026-53870
CVE-2026-53870 · Hermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store Files
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attackers with local filesystem access can read these files directly to obtain sensitive data including conversation history, tool payloads, prompts, and per-route HMAC secrets.
CVSS 6.8 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
hermes-agent
- Versions
- ≥ 0, < 0.16.0: Affected (semver)
- 0.16.0: Not affected (semver)
Update to 0.16.0
hermes-agent PyPI
- Versions
- 0.13.0
- 0.14.0
- 0.15.0
- 0.15.1
- 0.15.2
- Affected ranges
- ECOSYSTEM: < 0.16.0
Update to 0.16.0
Original sources
- https://github.com/NousResearch/hermes-agent/releases/tag/v2026.6.5
- https://github.com/NousResearch/hermes-agent/pull/30917
- https://github.com/NousResearch/hermes-agent/pull/31469
- https://github.com/NousResearch/hermes-agent/commit/3bace071bfadf2d2bec2ee048471a31ec920e3e8
- https://www.vulncheck.com/advisories/hermes-agent-sensitive-file-permission-vulnerability-in-store-files
- https://nvd.nist.gov/vuln/detail/CVE-2026-53870