Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.23. This affects the function _sync_anthropic_entry_from_credentials_file of the file agent/credential_pool.py of the component Credential Pool Synchronization. The manipulation results in improper authentication. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-10548 Improper Authentication in NousResearch Hermes-Agent Credential Pool Synchronization https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-10548
Post summary
The post announces CVE-2026-10548 for Improper Authentication in NousResearch Hermes-Agent Credential Pool Synchronization, but offers no exploits, PoC, or remediation details.
⚠️ HIGH — CVE-2026-10548 A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.23. This affects the function _sync_anthr… CVSS 5.3 ⚡ Exploit in the wild Full analysis → https://sec.kaitan.id/cves/CVE-2026-10548 #Anthropic #CyberSecurity #InfoSec
Post summary
CVE-2026-10548 affects the _sync_anthr function in NousResearch hermes-agent (up to 2026.4.23) with a CVSS 5.3 score, and reports active exploitation in the wild; no patch or PoC details are provided.