CVE-2026-9350: NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization
A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This affects the function checkallcommandguards of the file tools/approval.py of the component Batch Runner. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
NousResearch hermes-agent Batch Runnerfrom your environment.If the Batch Runner component is not required, uninstall or disable the Batch Runner component (or remove hermes-agent) until a vendor-supplied fix is available to eliminate the vulnerable approval.py check_all_command_guards code path.
- Configuration
If possible via configuration, disable the Batch Runner functionality or disable the approval/check_all_command_guards behavior so the vulnerable code path cannot be triggered.
NousResearch hermes-agent Batch Runner approval checks (check_all_command_guards) = disabled - Compensating control
Block or restrict remote access to hermes-agent and the Batch Runner interfaces: apply firewall rules, network ACLs, VPN or isolation so only trusted/administrative hosts can reach the agent; remove any public exposure.
- Operational
Monitor logs and network traffic for indicators of exploitation of the Batch Runner approval function. If compromise is suspected, perform incident response (isolate affected hosts, rebuild or remove the agent, and follow standard containment/remediation procedures).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9350?
CVE-2026-9350 has a high severity rating of 7.3.
What systems are affected by CVE-2026-9350?
CVE-2026-9350 affects NousResearch hermes-agent versions up to 2026.4.16.
How can CVE-2026-9350 be exploited?
CVE-2026-9350 can be exploited remotely due to missing authorization in the check_all_command_guards function.
How do I fix CVE-2026-9350?
To fix CVE-2026-9350, update NousResearch hermes-agent to a version beyond 2026.4.16.
What impact does CVE-2026-9350 have on the system?
CVE-2026-9350 allows an attacker to manipulate authorization controls, leading to potential unauthorized access.