CVE-2026-7112: NousResearch hermes-agent API_SERVER_KEY api_server.py _check_auth improper authentication
A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function checkauth of the file gateway/platforms/apiserver.py of the component APISERVERKEY Handler. The manipulation leads to improper authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a pull request but has not reacted yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7112?
CVE-2026-7112 has been classified as having a medium severity due to its potential for unauthorized access.
How do I fix CVE-2026-7112?
To remediate CVE-2026-7112, update to the latest version of NousResearch hermes-agent where the authentication vulnerability has been addressed.
Which versions of NousResearch hermes-agent are affected by CVE-2026-7112?
CVE-2026-7112 specifically affects NousResearch hermes-agent version 0.8.0.
What component is affected by CVE-2026-7112?
CVE-2026-7112 affects the _check_auth function found in the api_server.py file within the API_SERVER_KEY Handler component.
What type of vulnerability is CVE-2026-7112?
CVE-2026-7112 is classified as an improper authentication vulnerability.