Is there a public PoC exploit available for CVE-2026-18773?

Yes, a public proof-of-concept exploit is available for CVE-2026-18773. Prioritise patching immediately. EPSS: 0.2%.

hermes-agent CVE-2026-18773

Q: What is the CVSS score of CVE-2026-18773?

CVE-2026-18773 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-52727 LOW

Incorrect Authorization (CWE-863)

2026-08-04 VulDB

GHSA-9cgm-8qh5-gx92

Authentication Bypass Hermes Agent Nousresearch

2.1

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

2.1 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.3 MEDIUM

Network-accessible gateway requires low-privilege authentication; limited and equal C/I/A impact with no scope change beyond the vulnerable system.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Aug 04, 2026 - 16:23 NVD

MEDIUM LOW

CVSS changed

Aug 04, 2026 - 16:23 NVD

5.3 (MEDIUM) 2.1 (LOW)

Analysis Generated

Aug 04, 2026 - 16:13 vuln.today

CVE Published

Aug 04, 2026 - 15:00 cve.org

MEDIUM 5.3

DescriptionCVE.org

A vulnerability was detected in NousResearch hermes-agent up to 2026.6.5. Affected by this issue is the function _check_slash_access of the file gateway/run.py of the component Quick Command Handler. The manipulation results in incorrect authorization. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Incorrect authorization in NousResearch hermes-agent's Quick Command Handler allows low-privileged remote attackers to bypass slash command access controls via a flaw in the _check_slash_access function within gateway/run.py. All versions through 2026.6.5 are confirmed affected, with a public proof-of-concept exploit available on GitHub. The vendor did not respond to responsible disclosure, leaving no official patch available at time of analysis.

Technical ContextAI

hermes-agent is an AI agent framework by NousResearch (CPE: cpe:2.3:a:nousresearch:hermes-agent:*:*:*:*:*:*:*:*) that exposes a gateway layer for processing agent interactions, including a Quick Command Handler that interprets slash-prefixed commands. The vulnerability resides in the _check_slash_access function in gateway/run.py, classified as CWE-863 (Incorrect Authorization). This root cause class indicates that an authorization check is performed but implemented with flawed logic - such as checking the wrong resource, applying inverted conditions, or failing to enforce the intended policy - rather than being absent entirely (which would be CWE-862). The result is that low-privileged users can invoke slash commands for which they lack authorization.

RemediationAI

No vendor-released patch is available at time of analysis - the vendor did not respond to responsible disclosure, and no fixed version is independently confirmed. As a primary compensating control, restrict network access to the hermes-agent gateway endpoint at the firewall or reverse proxy layer, permitting only trusted, known-good clients. If the Quick Command Handler or slash command functionality is not actively required, disable it in the gateway configuration to eliminate the attack surface in gateway/run.py entirely; note this will remove slash command functionality from all users. Enforce stricter authentication and session controls upstream of the gateway to raise the bar beyond low-privilege access. Monitor VulDB advisory https://vuldb.com/vuln/385783 and https://vuldb.com/cve/CVE-2026-18773 for vendor patch releases.