High-Severity Hermes Agent Auth Flaw Enables Full Session Takeover — Fixed in v0.21.6

Tenable Research disclosed TRA-2026-65 on October 9. Inconsistent URL parsing (Python urllib vs browser WHATWG) in the native OAuth PKCE flow (`GET /auth/native/authorize`) allowed an attacker to redirect authorization codes to a controlled origin. Combined with attacker-controlled PKCE challenge, this enables full account session takeover. Affects versions before 0.21.6. Fixed in the October 8 release. No confirmed in-the-wild exploitation.

Credit@Python_s_

Cover art for Security: High-Severity Hermes Agent Auth Flaw Enables Full Session Takeover — Fixed in v0.21.6

Why it matters

Immediate operational risk for anyone exposing the native dashboard auth endpoint. Upgrade is the clear action. Part of broader auth hardening in the release (rate-limit spoofing, audit log bounds, body size limits).

From the source

Post on X@Python_s_

Hermes Agent #security #authentication #oauth #pkce #vulnerability #upgrade

More Security

SecurityOct 22

Blackbox Security Plugin Enters Hermes Catalog

Agent Blackbox is now in the official Hermes plugin catalog. It checks tool calls against a threat graph (Origin Trail DKG). Audit mode logs; block mode can refuse risky calls.

Credit@umanitek

SecurityOct 17

NVIDIA App Agent Control Enabled by Default

The NVIDIA App 11.0.9 update adds a local MCP server that allows agents (Hermes, OpenClaw, etc.) to control games, settings, and ShadowPlay. Many users found the toggle already enabled after the auto-update.

Credit@MichaelGannotti

SecurityOct 11

Hermes Config Injection Path to Approval Bypass (CVE-2026-108593)

VulnCheck published a CVE on a third-party dashboard (9router) that allows authenticated users to inject arbitrary keys into Hermes config.yaml via a settings endpoint. Demonstrated path: set hooks_auto_accept and a shell command that then runs after LLM calls with no further approval. The underlying condition is “write access to Hermes config = ability to disable approval gates.”

Credit@ueo0j

Never miss a night

Every pick, delivered to your reader.

One feed for everything, or one per agent harness you run. Rebuilt every night, with full credit on every item.