CVE-2026-10222 json
NousResearch hermes-agent config.py _sanitize_env_lines injection
published 2026-06-01 5 mo ago modified 2026-07-28 3 mo ago also GHSA-mv8x-fg99-32mf , PYSEC-2026-2513 , EUVD-2026-33555
- cvss
- 5.6
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 18%
- public exploits
- 0
- none known
Summary
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this issue is the function _sanitize_env_lines of the file hermes_cli/config.py. The manipulation results in injection. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Patch / fix
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 5 mo ago
Exploit prediction
0.27% chance of exploitation in the next 30 days, higher than 18% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- gist.github.com https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 6.3 | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
| CNA | 3.1 | 5.6 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R |
| CNA | 3.0 | 5.6 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R |
| CNA | 2.0 | 5.1 | AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR |
| CNA | 4.0 | 2.9 | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| CNA | 3.1 | 5.6 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L |
| CNA | 2.0 | 5.1 | AV:N/AC:H/Au:N/C:P/I:P/A:P |
| OSV | 3.1 | 5.6 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L |
| GitHub | 3.1 | 5.6 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | hermes-agent | <0.18.0 |
0.18.0 |
Affected products
- NousResearch hermes-agent
Classification
References
-
github.com
/NousResearch/hermes-agent/commit/b944c6e821c2177eac6da857c99ff24566aa56b0
web
-
gist.github.com
/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0
exploit, web
-
vuldb.com
/vuln/367501
vdb-entry, technical-description, web
-
vuldb.com
/vuln/367501/cti
signature, permissions-required, web
-
vuldb.com
/cve/CVE-2026-10222
third-party-advisory, web
-
vuldb.com
/submit/822020
third-party-advisory, web
-
nvd.nist.gov
/vuln/detail/CVE-2026-10222
advisory
-
github.com
/NousResearch/hermes-agent
package
-
github.com
/pypa/advisory-database/tree/main/vulns/hermes-agent/PYSEC-2026-2513.yaml
web
-
pypi.org
/project/hermes-agent
package
-
github.com
/advisories/GHSA-mv8x-fg99-32mf
advisory
Sources
- CVE List CVE-2026-10222
- GitHub Advisory GHSA-mv8x-fg99-32mf
- NVD CVE-2026-10222
- OSV PYSEC-2026-2513
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.