CVE-2026-82021 NousResearch CVE debrief

Who should care

Defenders responsible for securing Hermes Agent installations, particularly those using versions 0.18.2 or prior, should assess exposure and prioritize updates to version 0.19.0 or later.

Why it matters

CVE-2026-82021 is a critical supply chain vulnerability in Hermes Agent's MCP catalog, allowing remote code execution via a compromised third-party upstream repository. Defenders should prioritize verifying and updating Hermes Agent, reviewing and securing third-party repository references, and monitoring for suspicious activity.

• Remote code execution via compromised third-party repository
• Malicious code propagation to all hosts installing the affected catalog entry
• Potential for lateral movement and further exploitation

Technical summary

The Hermes Agent's MCP catalog contains a supply chain vulnerability that allows a remote attacker to execute arbitrary code by compromising a third-party upstream repository referenced via a mutable branch rather than a pinned commit SHA. This vulnerability exists in versions 0.18.2 and prior, up to 0.19.0. An attacker can exploit this by compromising a mutable branch reference, enabling malicious code propagation to all hosts installing the affected catalog entry. Defenders should prioritize verifying and updating Hermes Agent to version 0.19.0 or later, reviewing and securing third-party repository references, and monitoring for suspicious activity in their environment.

Defensive priority

Defenders should prioritize verifying and updating Hermes Agent to version 0.19.0 or later, reviewing and securing third-party repository references, and monitoring for suspicious activity in their environment.

Recommended defensive actions

• Verify and update Hermes Agent to version 0.19.0 or later
• Review and secure third-party repository references
• Monitor for suspicious activity in the environment
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its critical CVSS score of 9. The Hermes Agent's MCP catalog vulnerability allows for remote code execution by compromising a third-party upstream repository referenced via a mutable branch.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.