Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-53870
PUBLISHED
More InfoOfficial Page
Assigner-VulnCheck
Assigner Org ID-83251b91-4cc7-4094-a5c7-464a1b83ea10
View Known Exploited Vulnerability (KEV) details
Published At-17 Jun, 2026 | 17:57
Updated At-17 Jun, 2026 | 18:39
Rejected At-
▼CVE Numbering Authority (CNA)
Hermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store Files

Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attackers with local filesystem access can read these files directly to obtain sensitive data including conversation history, tool payloads, prompts, and per-route HMAC secrets.

Affected Products
Vendor
NousResearch
Product
hermes-agent
Repo
https://github.com/NousResearch/hermes-agent
Default Status
unaffected
Versions
Affected
  • From 0 before 0.16.0 (semver)
Unaffected
  • 0.16.0 (semver)
Problem Types
TypeCWE IDDescription
CWECWE-276Incorrect Default Permissions
Type: CWE
CWE ID: CWE-276
Description: Incorrect Default Permissions
Metrics
VersionBase scoreBase severityVector
4.06.8MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
3.15.5MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Version: 4.0
Base score: 6.8
Base severity: MEDIUM
Vector:
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Version: 3.1
Base score: 5.5
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
finder
Chia Min Jun Lennon
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/NousResearch/hermes-agent/releases/tag/v2026.6.5
release-notes
https://github.com/NousResearch/hermes-agent/pull/30917
issue-tracking
https://github.com/NousResearch/hermes-agent/pull/31469
issue-tracking
https://github.com/NousResearch/hermes-agent/commit/3bace071bfadf2d2bec2ee048471a31ec920e3e8
patch
https://www.vulncheck.com/advisories/hermes-agent-sensitive-file-permission-vulnerability-in-store-files
third-party-advisory
Hyperlink: https://github.com/NousResearch/hermes-agent/releases/tag/v2026.6.5
Resource:
release-notes
Hyperlink: https://github.com/NousResearch/hermes-agent/pull/30917
Resource:
issue-tracking
Hyperlink: https://github.com/NousResearch/hermes-agent/pull/31469
Resource:
issue-tracking
Hyperlink: https://github.com/NousResearch/hermes-agent/commit/3bace071bfadf2d2bec2ee048471a31ec920e3e8
Resource:
patch
Hyperlink: https://www.vulncheck.com/advisories/hermes-agent-sensitive-file-permission-vulnerability-in-store-files
Resource:
third-party-advisory
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/NousResearch/hermes-agent/pull/30917
exploit
Hyperlink: https://github.com/NousResearch/hermes-agent/pull/30917
Resource:
exploit
Details not found