Is there a public PoC exploit available for CVE-2026-17432?

Yes, a public proof-of-concept exploit is available for CVE-2026-17432. Prioritise patching immediately. EPSS: 0.2%.

Is there a patch available for CVE-2026-17432?

Yes, a patch is available for CVE-2026-17432. Update the affected software to the latest version immediately.

Hermes Agent CVE-2026-17432

Q: What is the CVSS score of CVE-2026-17432?

CVE-2026-17432 has a CVSS 4.0 base score of 1.3 (Low). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-49046 LOW

Improper Access Control (CWE-284)

2026-07-26 VulDB

GHSA-6r3x-gc73-h69w

Authentication Bypass Hermes Agent

1.3

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

1.3 LOW

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Source Code Evidence Fetched

Jul 26, 2026 - 12:05 vuln.today

Analysis Generated

Jul 26, 2026 - 12:05 vuln.today

CVSS changed

Jul 26, 2026 - 01:22 NVD

2.3 (LOW) 1.3 (LOW)

CVE Published

Jul 26, 2026 - 00:15 cve.org

LOW 1.3

DescriptionCVE.org

A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/simplex/adapter.py of the component SimpleX Gateway Authorization. The manipulation of the argument contactId results in improper access controls. The attack may be launched remotely. A high complexity level is associated with this attack. The exploitation appears to be difficult. The exploit is now public and may be used. The patch is identified as 490c486ff65b766d9de0fe0e6f26e1778aaa8fb3. Applying a patch is advised to resolve this issue.

AnalysisAI

We need to analyze the provided data for CVE-2026-17432 and synthesize a JSON output per the instructions.

First, extract relevant info:

CVE ID: CVE-2026-17432
Description: Vulnerability in NousResearch hermes-agent 2026.6.5, in file hermes-agent/plugins/platforms/simplex/adapter.py, component SimpleX Gateway Authorization. Manipulation of argument contactId results in improper access controls. Attack may be launched remotely, high complexity, difficult exploitation. Exploit is public, patch available. Patch identified as commit 490c486ff65b766d9de0fe0e6f26e1778aaa8fb3. CVSS Score 1.3, vector CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/R:X/V:X/RE:X/U:X
CWE: CWE-284 (Improper Access Control)
EPSS: 0.23%, percentile 14% -> low exploitation probability.
KEV: not mentioned, so not in KEV -> no active exploitation. Tags include "Authentication Bypass, Hermes Agent"
POC/Exploit: Publicly available (tag says exploit public, references include exploit URL)
Patch: Available from vendor (patch commit and PR)
Reported by: VulDB
CPE: cpe:2.3:a:nousresearch:hermes-agent:*:*:*:*:*:*:*:* -> vulnerable versions all, but description and EUVD mention version 2026.6.5 specifically? EUVD affected versions: ["hermes-agent 2026.6.5"]
ENISA EUVD ID: EUVD-2026-49046
References: multiple vuldb pages, github issues, PR diff, commit.

The PR diff provides crucial technical details: the vulnerability is in the SimpleX Gateway Authorization mechanism. The adapter.py originally used both user_id (contactId) and source.user_name (the contact's self-asserted profile display name) for authorization allowlist. This allowed an attacker to rename their profile to an allowlisted value and gain unauthorized access. The fix changes to use source.user_id_alt (local display name) instead of source.user_name, which is stable and not attacker-controlled. This is essentially an