Nesquena Hermes-Webui vulnerabilities

CVE-2026-49973 [CRITICAL] CWE-306 CVE-2026-49973: Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows u Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the _set_password parameter to the settings API endpoint without any network origin restriction. Attackers on any reachable network can send a POST request to the settings endpoin

CVE-2026-49959 [HIGH] CWE-78 CVE-2026-49959: Hermes WebUI before version 0.51.311 contains a remote code execution vulnerability that allows auth Hermes WebUI before version 0.51.311 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by placing malicious executable Git configuration in a workspace repository's .git/config file. Attackers can exploit Git subprocess invocations in api/workspace_git.py through vectors such as core.fsmoni

CVE-2026-6832 [HIGH] CWE-22 CVE-2026-6832: Hermes WebUI contains an arbitrary file deletion vulnerability in the /api/session/delete endpoint t Hermes WebUI contains an arbitrary file deletion vulnerability in the /api/session/delete endpoint that allows authenticated attackers to delete files outside the session directory by supplying an absolute path or path traversal payload in the session_id parameter. Attackers can exploit unvalidated session identifiers to construct paths that bypass the S

CVE-2026-49957 [HIGH] CWE-22 CVE-2026-49957: Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the SSH/remote terminal profile workspace resolution logic within _remote_terminal_workspace_candidate(). Attackers can configure a remote terminal working dir

CVE-2026-22677 [MEDIUM] CWE-22 CVE-2026-22677: Hermes WebUI prior to 0.51.44 contains a path traversal vulnerability in the session import endpoint Hermes WebUI prior to 0.51.44 contains a path traversal vulnerability in the session import endpoint that allows authenticated attackers to read arbitrary files by importing a crafted session with an unrestricted workspace value. Attackers can supply a blocked filesystem root in the workspace field and subsequently use relative paths in the session f

CVE-2026-6829 [MEDIUM] CWE-22 CVE-2026-6829: nesquena hermes-webui contains a trust-boundary failure vulnerability that allows authenticated atta nesquena hermes-webui contains a trust-boundary failure vulnerability that allows authenticated attackers to set or change a session workspace to an arbitrary existing directory on disk by manipulating workspace path parameters in endpoints such as /api/session/new, /api/session/update, /api/chat/start, and /api/workspaces/add. Attackers can repoint a

CVE-2026-49956 [MEDIUM] CWE-862 CVE-2026-49956: Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows a Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the session search endpoint without active-profile filtering. Attackers can send requests to the sessions search handler to retrieve session titles and transcript message conten

CVE-2026-49955 [MEDIUM] CWE-770 CVE-2026-49955: Hermes WebUI before version 0.51.270 contains a resource exhaustion vulnerability that allows unauth Hermes WebUI before version 0.51.270 contains a resource exhaustion vulnerability that allows unauthenticated remote attackers to degrade service availability by repeatedly calling the passkey options endpoint without completing assertion. Attackers can send unlimited POST requests to the authentication endpoint, causing unbounded growth of the chal

CVE-2026-58174 [MEDIUM] CWE-732 CVE-2026-58174: Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named p Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated as the default profile by the profile authorization ch

CVE-2026-55205 [MEDIUM] CWE-770 CVE-2026-55205: Hermes WebUI before 0.51.468 contains a resource exhaustion vulnerability in the unauthenticated POS Hermes WebUI before 0.51.468 contains a resource exhaustion vulnerability in the unauthenticated POST /api/onboarding/oauth/start endpoint that allows unbounded accumulation of in-memory flow state and daemon threads. Attackers can send repeated or concurrent requests to exhaust server memory and thread resources, potentially triggering repeated out

CVE-2026-49958 [MEDIUM] CWE-367 CVE-2026-49958: Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vu Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vulnerability in the git_discard function within api/workspace_git.py that allows attackers to delete files outside the configured workspace boundary by replacing a validated path component with a symlink after validation but before deletion. Attackers

CVE-2026-6830 [LOW] CWE-459 CVE-2026-6830: nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before loading the next profile. Attackers or users can exploit additive dotenv reload behavior to access provider API keys and other sensitive secrets from one profile context in ano

CVE-2026-53871 [HIGH] CWE-565 Hermes WebUI < 0.51.368 - Profile-Scoped Authorization Bypass via Forged hermes_profile Cookie Hermes WebUI < 0.51.368 - Profile-Scoped Authorization Bypass via Forged hermes_profile Cookie Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the get_profile_cookie() function that accepts unauthenticated profile names from the hermes_profile cookie. An authenticated attacker can forge the hermes_profile cookie value to bypass profile-scope

CVE-2026-55197 [HIGH] CWE-639 Hermes WebUI < 0.51.443 - Broken Access Control in /api/session Endpoint Hermes WebUI &messages=1 to retrieve unauthorized conversation transcripts and metadata.

CVE-2026-55198 [HIGH] CWE-639 Hermes WebUI < 0.51.443 - Cross-Profile Session Data Exfiltration via Session Export Endpoint Hermes WebUI < 0.51.443 - Cross-Profile Session Data Exfiltration via Session Export Endpoint Hermes WebUI before 0.51.443 contains an authorization bypass vulnerability in the session export endpoint that allows authenticated users to access sessions from other profiles. The _handle_session_export handler in api/routes.py fails to verify active-profile ownership before se