CVE-2026-10223: NousResearch hermes-agent memory_tool.py _scan_memory_content injection
A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function scanmemorycontent of the file tools/memorytool.py. This manipulation causes injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
NousResearch hermes-agentfrom your environment.Uninstall the hermes-agent from all affected systems until a vendor patch is available.
- Compensating control
Block network/remote access to the hermes-agent (apply firewall/ACL rules to restrict access to trusted hosts) or isolate affected hosts from networks to prevent remote exploitation.
- Operational
Stop and disable the hermes-agent service on affected hosts immediately; investigate systems for signs of compromise and follow incident response procedures (containment, eradication, restoration from known-good backups).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10223?
CVE-2026-10223 has a severity rating of medium, specifically a score of 6.3.
How do I fix CVE-2026-10223?
To mitigate CVE-2026-10223, update your NousResearch hermes-agent to version 2026.4.31 or later.
What kind of attack is associated with CVE-2026-10223?
CVE-2026-10223 is associated with a memory content injection attack that can be executed remotely.
What component of NousResearch hermes-agent is affected by CVE-2026-10223?
CVE-2026-10223 affects the _scan_memory_content function in the memory_tool.py file.
Is the exploit for CVE-2026-10223 publicly available?
Yes, the exploit for CVE-2026-10223 has been made publicly available.