PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-10222 NousResearch CVE debrief

A low-severity injection vulnerability in NousResearch hermes-agent, affecting versions up to 2026.4.30. The flaw resides in the _sanitize_env_lines function within hermes_cli/config.py. The vulnerability is remotely exploitable but requires high attack complexity, making exploitation difficult. A public exploit has been released. The vendor was contacted but did not respond.

Vendor
NousResearch
Product
hermes-agent
CVSS
LOW 2.9
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-01
Original CVE updated
2026-07-22
Advisory published
2026-06-01
Advisory updated
2026-07-22

Who should care

Organizations running hermes-agent versions up to 2026.4.30 with exposed management or configuration interfaces.

Technical summary

The _sanitize_env_lines function in hermes_cli/config.py of NousResearch hermes-agent (up to 2026.4.30) fails to properly neutralize special elements, resulting in an injection condition. The vulnerability is network-accessible but requires high attack complexity. A public exploit exists. No vendor fix is currently available.

Defensive priority

low

Recommended defensive actions

  • Review hermes_cli/config.py in hermes-agent deployments and apply input validation or neutralization controls to the _sanitize_env_lines function if local code review confirms the vulnerability.
  • Monitor NVD and vendor channels for an official patch or advisory for hermes-agent.
  • Restrict network access to hermes-agent management interfaces where feasible, given remote exploitability.
  • Assess whether hermes-agent instances are deployed in environments where the reported injection could affect downstream components.

Evidence notes

CVE published 2026-06-01. CVSS 4.0 score of 2.9 (LOW). Attack vector is network-based with high complexity. CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component) and CWE-707 (Improper Neutralization) identified. Vendor attribution derived from Vuldb reference domain with low confidence and requires review.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-10222 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-10222

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-10222 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-10222

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.