Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function _check_sensitive_path of the file tools/file_tools.py. The manipulation results in symlink following. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.9.0 is able to mitigate this issue. The patch is identified as 311dac197145e19e07df68feba2cd55d896a3cd1. Upgrading the affected component is recommended.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-7397 Symlink Following Vulnerability in NousResearch Hermes-Agent 0.8.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7397
Post summary
The text announces a symlink following vulnerability (CVE-2026-7397) affecting NousResearch Hermes-Agent 0.8.0, linking to a VulMon page for details, but offers no further exploit, patch, or mitigation information.
CVE-2026-7397 A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function _check_sensitive_path of the file tools/file_tools.py. The manipulatio… https://www.cve.org/CVERecord?id=CVE-2026-7397
Post summary
Announcement of a discovered flaw in NousResearch hermes-agent 0.8.0 affecting _check_sensitive_path; no PoC, exploit, active use, or patch details provided.