Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2026-7112
Received
More InfoOfficial Page
Source-cna@vuldb.com
View Known Exploited Vulnerability (KEV) details
Published At-27 Apr, 2026 | 10:16
Updated At-27 Apr, 2026 | 10:16

A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function _check_auth of the file gateway/platforms/api_server.py of the component API_SERVER_KEY Handler. The manipulation leads to improper authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a pull request but has not reacted yet.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary4.06.3MEDIUM
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary3.15.6MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Secondary2.05.1MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P
Type: Secondary
Version: 4.0
Base score: 6.3
Base severity: MEDIUM
Vector:
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Type: Primary
Version: 3.1
Base score: 5.6
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Type: Secondary
Version: 2.0
Base score: 5.1
Base severity: MEDIUM
Vector:
AV:N/AC:H/Au:N/C:P/I:P/A:P
CPE Matches

Weaknesses
CWE IDTypeSource
CWE-287Primarycna@vuldb.com
CWE ID: CWE-287
Type: Primary
Source: cna@vuldb.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://github.com/NousResearch/hermes-agent/cna@vuldb.com
N/A
https://github.com/NousResearch/hermes-agent/issues/6439cna@vuldb.com
N/A
https://github.com/NousResearch/hermes-agent/pull/6477cna@vuldb.com
N/A
https://vuldb.com/submit/800800cna@vuldb.com
N/A
https://vuldb.com/vuln/359712cna@vuldb.com
N/A
https://vuldb.com/vuln/359712/cticna@vuldb.com
N/A
Hyperlink: https://github.com/NousResearch/hermes-agent/
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://github.com/NousResearch/hermes-agent/issues/6439
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://github.com/NousResearch/hermes-agent/pull/6477
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/submit/800800
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/vuln/359712
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/vuln/359712/cti
Source: cna@vuldb.com
Resource: N/A
Change History
0Changes found

Details not found