CVE-2026-49957: Hermes WebUI < 0.51.296 Workspace Boundary Bypass via api/workspace.py
Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the SSH/remote terminal profile workspace resolution logic within remoteterminalworkspacecandidate(). Attackers can configure a remote terminal working directory to a system directory such as /etc, causing the workspace resolution path to accept it as a trusted local workspace root before the isblockedworkspacepath() guard executes, enabling read access to local system files through workspace file-read helpers.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Hermes WebUIto a version that resolves this vulnerability.Fixed in 0.51.296
Event History
Frequently Asked Questions
What is the severity of CVE-2026-49957?
The severity of CVE-2026-49957 is medium with a score of 6.3.
How do I fix CVE-2026-49957?
To fix CVE-2026-49957, upgrade Hermes WebUI to version 0.51.296 or later.
What type of vulnerability is CVE-2026-49957?
CVE-2026-49957 is classified as a workspace boundary bypass vulnerability.
Can CVE-2026-49957 be exploited by unauthenticated users?
No, CVE-2026-49957 can only be exploited by authenticated attackers.
What impact does CVE-2026-49957 have on the system?
CVE-2026-49957 allows attackers to circumvent blocked-root path checks, potentially compromising system security.