CVE-2026-85105: NousResearch hermes-agent Session Management s71.py _sess_nowait authorization
A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function sessnowait of the file s71.py of the component Session Management. This manipulation of the argument sessionid causes authorization bypass. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require valid credentials or user interaction?
No. The listed attack vector is network-based, with no privileges required and no user interaction required.
What is the practical impact of successful exploitation?
An attacker can bypass authorization by manipulating the session_id argument handled by _sess_nowait in s71.py. The supplied metrics indicate low confidentiality, integrity, and availability impact.
Is a vendor response or fix identified?
No vendor response is reported. The available information does not identify a patch or other vendor-provided remediation.