CVE-2026-7113

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-7113", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-04-26T15:54:52.370Z", "datePublished": "2026-04-27T10:00:17.997Z", "dateUpdated": "2026-04-27T13:29:05.408Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-27T10:00:17.997Z"}, "title": "NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-306", "lang": "en", "description": "Missing Authentication"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-287", "lang": "en", "description": "Improper Authentication"}]}], "affected": [{"vendor": "NousResearch", "product": "hermes-agent", "versions": [{"version": "0.8.0", "status": "affected"}], "modules": ["Webhooks Endpoint"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/webhook.py of the component Webhooks Endpoint. The manipulation of the argument _INSECURE_NO_AUTH results in missing authentication. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitation is known to be difficult. The exploit has been made public and could be used. The project was informed of the problem early through a pull request but has not reacted yet."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.3, "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.6, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.6, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5.1, "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-04-26T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-04-26T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-04-26T18:00:08.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Yu-Bao (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/359713", "name": "VDB-359713 | NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/359713/cti", "name": "VDB-359713 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/800802", "name": "Submit #800802 | NousResearch hermes-agent 0.8.0 Unauthenticated Remote Code Execution Webhook", "tags": ["third-party-advisory"]}, {"url": "https://github.com/NousResearch/hermes-agent/issues/6440", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/NousResearch/hermes-agent/pull/6445", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/NousResearch/hermes-agent/", "tags": ["product"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-27T13:09:41.231194Z", "id": "CVE-2026-7113", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-27T13:29:05.408Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-7113", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-27T13:09:41.231194Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-27T13:09:42.691Z"}}], "cna": {"title": "NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication", "credits": [{"lang": "en", "type": "reporter", "value": "Yu-Bao (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5.1, "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"vendor": "NousResearch", "modules": ["Webhooks Endpoint"], "product": "hermes-agent", "versions": [{"status": "affected", "version": "0.8.0"}]}], "timeline": [{"lang": "en", "time": "2026-04-26T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-04-26T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-04-26T18:00:08.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/359713", "name": "VDB-359713 | NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/359713/cti", "name": "VDB-359713 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/800802", "name": "Submit #800802 | NousResearch hermes-agent 0.8.0 Unauthenticated Remote Code Execution Webhook", "tags": ["third-party-advisory"]}, {"url": "https://github.com/NousResearch/hermes-agent/issues/6440", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/NousResearch/hermes-agent/pull/6445", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/NousResearch/hermes-agent/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/webhook.py of the component Webhooks Endpoint. The manipulation of the argument _INSECURE_NO_AUTH results in missing authentication. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitation is known to be difficult. The exploit has been made public and could be used. The project was informed of the problem early through a pull request but has not reacted yet."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "Missing Authentication"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-287", "description": "Improper Authentication"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-27T10:00:17.997Z"}}}, "cveMetadata": {"cveId": "CVE-2026-7113", "state": "PUBLISHED", "dateUpdated": "2026-04-27T13:29:05.408Z", "dateReserved": "2026-04-26T15:54:52.370Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-04-27T10:00:17.997Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["Webhooks Endpoint"], "product": "hermes-agent", "vendor": "NousResearch", "versions": [{"status": "affected", "version": "0.8.0"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/webhook.py of the component Webhooks Endpoint. The manipulation of the argument _INSECURE_NO_AUTH results in missing authentication. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitation is known to be difficult. The exploit has been made public and could be used. The project was informed of the problem early through a pull request but has not reacted yet."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad en NousResearch hermes-agent 0.8.0. Afectada por este problema es alguna funcionalidad desconocida del archivo gateway/platforms/webhook.py del componente Webhooks Endpoint. La manipulaci\u00f3n del argumento _INSECURE_NO_AUTH resulta en falta de autenticaci\u00f3n. El ataque puede lanzarse remotamente. Un alto nivel de complejidad est\u00e1 asociado con este ataque. Se sabe que la explotaci\u00f3n es dif\u00edcil. El exploit se ha hecho p\u00fablico y podr\u00eda utilizarse. El proyecto fue informado del problema tempranamente a trav\u00e9s de una pull request, pero a\u00fan no ha reaccionado."}], "id": "CVE-2026-7113", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.9, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-7113", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-27T13:09:41.231194Z", "version": "2.0.3"}}]}, "published": "2026-04-27T11:16:02.173", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/NousResearch/hermes-agent/"}, {"source": "cna@vuldb.com", "url": "https://github.com/NousResearch/hermes-agent/issues/6440"}, {"source": "cna@vuldb.com", "url": "https://github.com/NousResearch/hermes-agent/pull/6445"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/800802"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/359713"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/359713/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}, {"lang": "en", "value": "CWE-306"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.8.0"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "hermes-agent", "source": "cna", "vendor": "NousResearch"}, "product": "hermes-agent", "vendor": "nousresearch"}], "analysis": {"en": {"generated_at": "2026-04-28T13:06:25.740975+00:00", "value": {"mitigation_remediation": ["Upgrade hermes\u2011agent to a version that disables the _INSECURE_NO_AUTH flag and enforces proper authentication checks", "Restrict external access to the Webhooks Endpoint by configuring a firewall or access control list to allow only trusted IP ranges", "Modify the configuration to enable authentication middleware or remove the endpoint entirely if it is not required"], "summary": {"action": "Apply patch", "impact": "Authentication bypass via insecure webhook endpoint"}, "threat_synthesis": {"affected_systems": "The issue affects NousResearch hermes\u2011agent version 0.8.0, specifically the Webhooks Endpoint component located in the gateway/platforms/webhook.py module. No other versions have been identified as vulnerable at this time.", "description_and_impact": "The vulnerability arises from manipulating the _INSECURE_NO_AUTH argument in gateway/platforms/webhook.py, allowing requests to the Webhooks Endpoint to bypass authentication. The description states that attacks can be launched remotely with a high level of complexity and that exploitation is difficult. While the impact on confidentiality, integrity, or availability is not explicitly detailed, it indicates that the unauthenticated endpoint could enable unintended use of the component. Based on the description, it is inferred that this may allow attackers to trigger arbitrary actions or retrieve sensitive data.", "risk_and_exploitability": "Based on the CVE description, the flaw can be exploited remotely by sending requests with the _INSECURE_NO_AUTH parameter. The description states that the exploit requires a high level of complexity and is publicly documented but difficult to execute. The CVSS score of 6.3 indicates medium\u2011to\u2011high impact, and the EPSS score of less than 1% suggests a low current exploitation probability. The flaw is not listed in the CISA KEV catalog. While the description does not detail the exact damage that could be caused, it is inferred that unauthenticated access could allow the Webhooks Endpoint to be used to perform actions within the hermes\u2011agent system."}}}}, "created": "2026-04-28T09:17:16.468914+00:00", "updated": "2026-04-28T13:15:31.876053+00:00", "vendors": ["nousresearch", "nousresearch$PRODUCT$hermes-agent"]}