Critical Hermes Agent Security Advisory — CVE-2026-71963

Malicious `.git/config` with `core.fsmonitor` can fire when the agent refreshes git status after a user message. Full environment (including provider API keys) is exposed. Affects builds prior to commit f6234d0. Do not open untrusted repo archives. The 0.21.0 tag alone is not proof of the fix.

Credit@soycronus

Cover art for Security: Critical Hermes Agent Security Advisory — CVE-2026-71963

Why it matters

Immediate operational risk for anyone cloning or opening third-party repos inside Hermes. Patch status should be verified before continuing normal use.

From the source

Post on X@soycronus

Hermes Agent #hermes-agent #cve #security #git #fsmonitor #advisory

More Security

SecurityOct 11

Hermes Config Injection Path to Approval Bypass (CVE-2026-108593)

VulnCheck published a CVE on a third-party dashboard (9router) that allows authenticated users to inject arbitrary keys into Hermes config.yaml via a settings endpoint. Demonstrated path: set hooks_auto_accept and a shell command that then runs after LLM calls with no further approval. The underlying condition is “write access to Hermes config = ability to disable approval gates.”

Credit@ueo0j

SecurityOct 22

Blackbox Security Plugin Enters Hermes Catalog

Agent Blackbox is now in the official Hermes plugin catalog. It checks tool calls against a threat graph (Origin Trail DKG). Audit mode logs; block mode can refuse risky calls.

Credit@umanitek

SecurityOct 17

OpenClaw Trail of Bits Audit and Public Advisories

OpenClaw completed a Trail of Bits security audit and continues to publish advisories publicly (unlike many agent products). Recent high-severity CVEs include tool policy bypasses in the npm package and TLS pin failures in the iOS Control UI.

Credit@joshavant, @DFIR_Lab

Never miss a night

Every pick, delivered to your reader.

One feed for everything, or one per agent harness you run. Rebuilt every night, with full credit on every item.