VulnSocial

CVE-2026-53870Disclosure

LOWCVSS 6.8 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attackers with local filesystem access can read these files directly to obtain sensitive data including conversation history, tool payloads, prompts, and per-route HMAC secrets.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-276

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-06-17); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-17: 1Mentions · 2026-06-18: 1Technical Details · 2026-06-17: 1Technical Details · 2026-06-18: 106-1706-18
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-171
Disclosure1
2026-06-181
General1
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-53870 Insecure File Permissions in Hermes Agent Before 0.16.0 Expose Se... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-53870 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    A brief alert about insecure file permissions in Hermes Agent (before 0.16.0). No exploit details, patch info, or reports of active attacks are provided.

    0000058
    4.1K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-53870 Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HM… https://www.cve.org/CVERecord?id=CVE-2026-53870

    Post summary

    The text announces that Hermes Agent versions before 0.16.0 create world‑readable files, thereby exposing conversation history.

    00000182
    57.6K followersView on X

Explore more

Back to dashboard