CVE-2026-82020: Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write Tool
Hermes Agent 0.16.0 prior to 0.17.0 contains an improper path restriction vulnerability that allows attackers who can influence ingested message content to overwrite the credential store by bypassing sensitive-path guards that excluded the auth.json file. Attackers can craft malicious messages directing the agent's file-write tooling to overwrite the credential store without triggering any path-based protection, enabling credential tampering or unauthorized access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Hermes Agentto a version that resolves this vulnerability.Fixed in 0.17.0
Event History
Frequently Asked Questions
Which deployments are affected?
Hermes Agent version 0.16.0 is affected; the issue is addressed in version 0.17.0. Deployments that ingest attacker-influenced message content are the relevant exposure scenario.
What does an attacker need to exploit this issue?
An attacker must be able to influence ingested message content and craft messages that direct the agent's file-write tooling. Exploitation also requires user interaction and has high attack complexity according to the provided vector.
How can I determine whether my deployment is at risk?
Verify whether the agent is running version 0.16.0 and whether it processes message content that an attacker could influence. Risk is present when that content can cause the file-write tool to act on attacker-directed paths.