CVE-2026-7397: NousResearch hermes-agent file_tools.py _check_sensitive_path symlink

Published Apr 29, 2026

Updated

A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function checksensitivepath of the file tools/filetools.py. The manipulation results in symlink following. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.9.0 is able to mitigate this issue. The patch is identified as 311dac197145e19e07df68feba2cd55d896a3cd1. Upgrading the affected component is recommended.

Affected Software

1 affected component

NousResearch hermes-agent=0.8.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade NousResearch hermes-agent to a version that resolves this vulnerability.
Fixed in 0.9.0Patch 311dac197145e19e07df68feba2cd55d896a3cd1

Event History

Apr 29, 2026

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:16 PM

DescriptionSeverityWeakness

Oct 13, 58358

Event

via FIRST·03:49 PM

Frequently Asked Questions

What is the severity of CVE-2026-7397?

CVE-2026-7397 has been classified as a high-severity vulnerability due to the potential for local symlink manipulation.

How do I fix CVE-2026-7397?

To fix CVE-2026-7397, update your NousResearch hermes-agent to version higher than 0.8.0 where the vulnerability is patched.

What type of vulnerability is CVE-2026-7397?

CVE-2026-7397 is a local symlink following vulnerability found in the file_tools.py component of NousResearch hermes-agent.

Which versions of NousResearch hermes-agent are affected by CVE-2026-7397?

CVE-2026-7397 affects NousResearch hermes-agent version 0.8.0 specifically.

Can CVE-2026-7397 be exploited remotely?

CVE-2026-7397 requires local access to exploit, making it a local privilege escalation vulnerability.