CVE-2026-49957 json
Hermes WebUI < 0.51.296 Workspace Boundary Bypass via api/workspace.py
published 2026-06-09 5 mo ago modified 2026-11-08 23 h ago also EUVD-2026-35704
- cvss
- 7.7
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 36%
- public exploits
- 0
- none known
Summary
Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the SSH/remote terminal profile workspace resolution logic within _remote_terminal_workspace_candidate(). Attackers can configure a remote terminal working directory to a system directory such as /etc, causing the workspace resolution path to accept it as a trusted local workspace root before the _is_blocked_workspace_path() guard executes, enabling read access to local system files through workspace file-read helpers.
Patch / fix
- nesquena hermes-webui 0.51.296
- github.com/nesquena/hermes-webui@91a89fb commit
- github.com/nesquena/hermes-webui#3731 pull request
- github.com/nesquena/hermes-webui#3744 pull request
- github.com/nesquena/hermes-webui/releases/tag/v0.51.296 release
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 5 mo ago
Exploit prediction
0.42% chance of exploitation in the next 30 days, higher than 36% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 6.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N |
| CNA | 3.1 | 7.7 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
| CNA | 4.0 | 6.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Affected products
- nesquena hermes-webui
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
github.com
/nesquena/hermes-webui/pull/3731
issue-tracking, patch
-
github.com
/nesquena/hermes-webui/pull/3744
issue-tracking, patch
-
github.com
/nesquena/hermes-webui/commit/91a89fb5d5c0bf87932917f9914ad0150ea62fe4
patch
-
github.com
/nesquena/hermes-webui/releases/tag/v0.51.296
release-notes
-
vulncheck.com
/advisories/hermes-webui-workspace-boundary-bypass-via-api-workspace-py
third-party-advisory
Sources
- CVE List CVE-2026-49957
- NVD CVE-2026-49957
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.