CVE-2026-10220: NousResearch hermes-agent skills_tool.py skill_view injection
A vulnerability was determined in NousResearch hermes-agent up to 2026.4.30. Affected is the function servepluginskill/skillview of the file tools/skillstool.py. Executing a manipulation can lead to injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
NousResearch hermes-agentfrom your environment.Uninstall or stop the hermes-agent service on systems where it is not required until a vendor fix is available.
- Configuration
Disable or block the skill_view/_serve_plugin_skill functionality (stop serving plugin skills or remove the endpoint) if the product configuration allows, to prevent remote injection via that function.
NousResearch hermes-agent (tools/skills_tool.py) _serve_plugin_skill / skill_view = disabled - Compensating control
Restrict network access to the hermes-agent service (management/API endpoints) to trusted IPs or internal networks using firewall rules, VPNs, or ACLs to reduce the risk of remote exploitation.
- Operational
Monitor logs and network traffic for signs of exploitation targeting the skill_view/_serve_plugin_skill endpoint; isolate and investigate any suspicious hosts and apply vendor-provided patches or updates when they become available.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10220?
The severity of CVE-2026-10220 is classified as high with a score of 7.3.
How does CVE-2026-10220 impact the NousResearch hermes-agent?
CVE-2026-10220 allows for skill_view injection, which can be exploited remotely through the _serve_plugin_skill function.
How can I mitigate CVE-2026-10220?
To mitigate CVE-2026-10220, ensure that you update the NousResearch hermes-agent to the latest version released after June 1, 2026.
What is the potential effect of exploiting CVE-2026-10220?
Exploiting CVE-2026-10220 can lead to unauthorized data manipulation and system compromise.
Is CVE-2026-10220 a remote exploit?
Yes, CVE-2026-10220 can be exploited remotely without requiring prior authentication.