Hermes Config Injection Path to Approval Bypass (CVE-2026-108593)

VulnCheck published a CVE on a third-party dashboard (9router) that allows authenticated users to inject arbitrary keys into Hermes config.yaml via a settings endpoint. Demonstrated path: set hooks_auto_accept and a shell command that then runs after LLM calls with no further approval. The underlying condition is “write access to Hermes config = ability to disable approval gates.”

Credit@ueo0j

Cover art for Security: Hermes Config Injection Path to Approval Bypass (CVE-2026-108593)

Why it matters

Shows that common productivity settings (auto-accept hooks) create persistent execution paths once any config-write primitive exists. Relevant to anyone running Hermes with external dashboards, plugins, or shared environments.

From the source

Hermes Agent #hermes #security #cve #hooks #config-injection #approvals

More Security

SecuritySep 22

Critical Hermes Agent Security Advisory — CVE-2026-71963

Malicious `.git/config` with `core.fsmonitor` can fire when the agent refreshes git status after a user message. Full environment (including provider API keys) is exposed. Affects builds prior to commit f6234d0. Do not open untrusted repo archives. The 0.21.0 tag alone is not proof of the fix.

Credit@soycronus

SecurityOct 22

Blackbox Security Plugin Enters Hermes Catalog

Agent Blackbox is now in the official Hermes plugin catalog. It checks tool calls against a threat graph (Origin Trail DKG). Audit mode logs; block mode can refuse risky calls.

Credit@umanitek

SecurityOct 17

OpenClaw Trail of Bits Audit and Public Advisories

OpenClaw completed a Trail of Bits security audit and continues to publish advisories publicly (unlike many agent products). Recent high-severity CVEs include tool policy bypasses in the npm package and TLS pin failures in the iOS Control UI.

Credit@joshavant, @DFIR_Lab

Never miss a night

Every pick, delivered to your reader.

One feed for everything, or one per agent harness you run. Rebuilt every night, with full credit on every item.