CVE-2026-14625 NousResearch CVE debrief

Who should care

Security teams responsible for NousResearch hermes-agent should prioritize patching this vulnerability. Remote attackers can exploit this flaw to bypass protection mechanisms, potentially leading to unauthorized access or data breaches. Organizations using affected versions of hermes-agent should take immediate action.

Technical summary

The vulnerability CVE-2026-14625 is caused by a flaw in the shell.exec function of the tui_gateway/server.py file in NousResearch hermes-agent up to 0.15.2. This allows remote attackers to manipulate the protection mechanism, leading to a failure in security controls. The CVSS score for this vulnerability is 2.1, indicating a low severity. However, the public release of the exploit increases the urgency for patching.

Defensive priority

Apply patches for NousResearch hermes-agent up to 0.15.2 immediately. Restrict access to the tui_gateway/server.py file and monitor for suspicious activity related to the shell.exec function.

Recommended defensive actions

• Apply patches for NousResearch hermes-agent up to 0.15.2
• Restrict access to the tui_gateway/server.py file
• Monitor for suspicious activity related to the shell.exec function
• Review and update incident response plans to address potential exploitation
• Conduct a thorough inventory of affected systems and prioritize patching

Evidence notes

The CVE-2026-14625 details are based on information from the NVD and Vuldb sources. The vulnerability allows remote attackers to bypass protection mechanisms in NousResearch hermes-agent up to 0.15.2. The exploit has been publicly released, increasing the risk of attacks. The vendor has not provided a response to this disclosure.

Official resources