Is there a public PoC exploit available for CVE-2026-14628?

Yes, a public proof-of-concept exploit is available for CVE-2026-14628. Prioritise patching immediately. EPSS: 0.6%.

hermes-agent CVE-2026-14628

Q: What is the CVSS score of CVE-2026-14628?

CVE-2026-14628 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.6%.

EUVD-2026-41673 MEDIUM

Path Traversal (CWE-22)

2026-07-04 VulDB

GHSA-85cr-q769-68x2

Path Traversal Hermes Agent

5.5

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.3 MEDIUM

Network-accessible endpoint exploitable without authentication; impact limited to partial file read with no integrity or availability consequence.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 04, 2026 - 13:33 vuln.today

CVSS changed

Jul 04, 2026 - 13:22 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

DescriptionCVE.org

A vulnerability was detected in NousResearch hermes-agent up to 2026.5.16. This impacts the function extract_media of the file gateway/platforms/base.py of the component Live Webhook Endpoint. Performing a manipulation results in path traversal. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Path traversal in NousResearch hermes-agent (all versions through 2026.5.16) exposes arbitrary server-side files via the Live Webhook Endpoint's extract_media function in gateway/platforms/base.py. Remote, unauthenticated attackers can read files outside the intended directory, resulting in low-confidentiality-impact disclosure - potentially exposing configuration files, credentials, or internal data. A public proof-of-concept exploit is available on GitHub; however, this vulnerability has not been listed in CISA KEV, indicating active exploitation is not yet confirmed at time of analysis.

Technical ContextAI

The affected component is the extract_media function within gateway/platforms/base.py, part of hermes-agent's Live Webhook Endpoint - a gateway layer that appears to handle media or file retrieval triggered by inbound webhook events. CWE-22 (Path Traversal) is the root cause class: user-supplied input (likely a filename or path parameter) is passed to a file-access routine without sufficient normalization or canonicalization, allowing ../ or equivalent directory traversal sequences to escape the intended base directory. The CPE string cpe:2.3:a:nousresearch:hermes-agent:*:*:*:*:*:*:*:* covers all versioned releases without platform restriction, suggesting the flaw is cross-platform. NousResearch hermes-agent is an AI agent framework; the webhook endpoint likely supports multi-modal or media-handling pipelines, making file path handling a natural integration point and attack surface.

RemediationAI

No vendor-released patch identified at time of analysis - the vendor did not respond to pre-disclosure contact, and no fix version has been published. As immediate compensating controls: disable or firewall the Live Webhook Endpoint entirely if not operationally required, as this eliminates the attack surface without code changes. If the endpoint must remain active, apply an ingress validation layer (WAF rule or reverse proxy rewrite) to reject requests containing path traversal sequences (../, ..\, URL-encoded variants %2e%2e%2f) in any path or filename parameter - note this may break legitimate deep-path media references if any exist. Restrict network access to the endpoint to trusted IP ranges only, reducing exposure to unauthenticated remote attackers. Monitor endpoint access logs for anomalous path patterns as a detection measure. No official vendor advisory URL is available; track https://vuldb.com/cve/CVE-2026-14628 for updates.