CVE-2026-53871: Hermes WebUI < 0.51.368 - Profile-Scoped Authorization Bypass via Forged hermes_profile Cookie
Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the getprofilecookie() function that accepts unauthenticated profile names from the hermesprofile cookie. An authenticated attacker can forge the hermesprofile cookie value to bypass profile-scoped authorization checks and access sessions, files, and resources across different profiles.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Hermes WebUIto a version that resolves this vulnerability.Fixed in 0.51.368
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53871?
The severity of CVE-2026-53871 is high with a score of 8.6.
How do I fix CVE-2026-53871?
To fix CVE-2026-53871, upgrade Hermes WebUI to version 0.51.368 or later.
What does CVE-2026-53871 affect?
CVE-2026-53871 affects Hermes WebUI versions prior to 0.51.368.
What type of vulnerability is CVE-2026-53871?
CVE-2026-53871 is an authorization bypass vulnerability.
Who can exploit CVE-2026-53871?
An authenticated attacker can exploit CVE-2026-53871 by forging the hermes_profile cookie.