VulnSocial

CVE-2026-84289General

LOWCVSS 2.1 · LOW

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function list_tools of the file tools/mcp_tool.py of the component MCP Tool. Performing a manipulation results in uncontrolled memory allocation. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-400CWE-789

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Exploit: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-03); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-03: 1Mentions · 2026-09-12: 1PoC Mentioned / Linked · 2026-09-12: 1Technical Details · 2026-09-03: 1Technical Details · 2026-09-12: 109-0309-12
Signal classification2 categories
General
150.0%
Exploit
150.0%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-09-031
General1
2026-09-121
Exploit1
Full discourse2 posts
  • Ryx@PadhiyarRushi
    Exploit

    CVE-2026-84289: uncontrolled memory allocation in NousResearch hermes-agent’s MCP tool list_tools function. Remote DoS via the MCP surface. Vendor was contacted early and didn’t respond. Public exploit exists. Another reminder that MCP tool handlers are just network-reachable code with almost no traditional input validation culture yet. https://vuldb.com/vuln/397720 #MCP #AISecurity #Cybersecurity #AI #Claude #VulnerabilityResearch #Infosec

    Post summary

    The post announces CVE‑2026‑84289, describing an uncontrolled memory allocation in the NousResearch hermes‑agent’s MCP list_tools function that allows remote DoS, and notes that a public exploit is available via vuldb.com.

    00020156
    953 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-84289 A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function list_tools of the file tools/mcp_tool.py of the component… https://www.cve.org/CVERecord?id=CVE-2026-84289

    Post summary

    A vulnerability is disclosed for NousResearch hermes-agent affecting the `list_tools` function, but no PoC, exploit, active exploitation, or patch details are provided.

    00000745
    58.1K followersView on X

Explore more

Back to dashboard