Is there a public PoC exploit available for CVE-2026-10548?

Yes, a public proof-of-concept exploit is available for CVE-2026-10548. Prioritise patching immediately. EPSS: 0.0%.

hermes-agent CVE-2026-10548

Q: What is the CVSS score of CVE-2026-10548?

CVE-2026-10548 has a CVSS 4.0 base score of 1.9 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-33856 LOW

Improper Authentication (CWE-287)

2026-06-02 VulDB

GHSA-g28j-ffjc-vcrh

Authentication Bypass Hermes Agent Nousresearch

1.9

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

1.9 LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Jun 02, 2026 - 02:22 NVD

MEDIUM LOW

CVSS changed

Jun 02, 2026 - 02:22 NVD

5.3 (MEDIUM) 1.9 (LOW)

Analysis Generated

Jun 02, 2026 - 01:43 vuln.today

DescriptionCVE.org

A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.23. This affects the function _sync_anthropic_entry_from_credentials_file of the file agent/credential_pool.py of the component Credential Pool Synchronization. The manipulation results in improper authentication. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Improper authentication in NousResearch hermes-agent through version 2026.4.23 allows a local low-privileged attacker to manipulate the Credential Pool Synchronization component, specifically the _sync_anthropic_entry_from_credentials_file function in agent/credential_pool.py, bypassing authentication controls over Anthropic API credentials. A proof-of-concept exploit is publicly available on GitHub and the vendor did not respond to coordinated disclosure, leaving no patch available at time of analysis. No public exploit identified at time of analysis for active KEV-confirmed campaigns, but publicly available exploit code exists and lowers the bar for any attacker already holding local system access.

Technical ContextAI

The vulnerability is rooted in CWE-287 (Improper Authentication) within the Credential Pool Synchronization subsystem of the hermes-agent package by NousResearch. The affected function, _sync_anthropic_entry_from_credentials_file in agent/credential_pool.py, is responsible for reading Anthropic API credentials from a local credentials file and synchronizing them into the agent's runtime credential pool. The flaw indicates that authentication or authorization controls governing which callers or credential entries may trigger or influence this synchronization are not properly enforced, enabling a low-privileged local user to manipulate credential loading or bypass intended access restrictions. CPE cpe:2.3:a:nousresearch:hermes-agent:*:*:*:*:*:*:*:* confirms all versions through 2026.4.23 of this application-tier package are within scope. Because the function directly handles Anthropic API credentials, exploitation could have downstream consequences beyond the local host, including unauthorized API access or billing fraud.

RemediationAI

No vendor-released patch has been identified at time of analysis - the vendor did not respond to disclosure, and RL:X in the CVSS temporal vector confirms no remediation level has been defined. Organizations should immediately restrict OS-level file permissions on agent/credential_pool.py and the associated Anthropic credentials file so only the dedicated hermes-agent service account can read or execute them, preventing low-privileged users from triggering or interfering with credential synchronization (note: this may require adjusting deployment scripts that assume broader access). Rotate any Anthropic API credentials that were accessible on affected systems and audit API usage logs for unauthorized calls. If the Credential Pool Synchronization feature is not operationally required, disable it or remove the credentials file - this eliminates the attack surface entirely but will break automated credential refresh. Monitor the VulDB entry at https://vuldb.com/vuln/367645 and the NousResearch hermes-agent repository for any upstream patch or fix commit. The public POC at https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d should be reviewed in an isolated test environment to confirm exposure before applying mitigations.