Is there a patch available for CVE-2026-58174?

Yes, a patch is available for CVE-2026-58174. Update the affected software to the latest version immediately.

Hermes WebUI CVE-2026-58174

Q: What is the CVSS score of CVE-2026-58174?

CVE-2026-58174 has a CVSS 4.0 base score of 6.0 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-40355 MEDIUM

Incorrect Permission Assignment for Critical Resource (CWE-732)

2026-06-30 VulnCheck

GHSA-8j74-6fjm-pjr7

Information Disclosure Hermes Webui

6.0

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

6.0 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.5 MEDIUM

Network-accessible web endpoint with low complexity; PR:L because authentication is required; C:H from cross-profile file read; no integrity or availability impact applies.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jun 30, 2026 - 17:22 vuln.today

CVSS changed

Jun 30, 2026 - 17:22 NVD

6.5 (MEDIUM) 6.0 (MEDIUM)

DescriptionCVE.org

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated as the default profile by the profile authorization check, a user on the default profile can export the imported session transcript and use its session identifier to read files from the named profile's workspace, defeating the application's profile isolation.

AnalysisAI

Cross-profile workspace isolation bypass in Hermes WebUI before 0.51.521 allows an authenticated low-privilege user operating under the default profile to read files scoped to other named profiles' workspaces. The /api/session/import handler validates the workspace against the active named profile but omits setting the profile field on the constructed Session object, persisting it with a null profile value. Because the authorization layer treats null profile as equivalent to the default profile, any default-profile user can exploit imported session identifiers to traverse the intended profile boundary and extract file contents - a complete defeat of the application's workspace isolation model. No public exploit is identified at time of analysis, and a vendor-released patch is available at v0.51.521.

Technical ContextAI

Hermes WebUI (CPE: cpe:2.3:a:nesquena:hermes-webui:*:*:*:*:*:*:*:*) is an open-source web-based session and chat management interface by nesquena. The root cause is CWE-732 (Incorrect Permission Assignment for Critical Resource): during session import via the /api/session/import REST endpoint, the server performs workspace validation against the active named profile correctly, but the Session object constructed afterward is never assigned the corresponding profile field. The persistence layer stores this session with a null profile. A separate logic error in the profile authorization check equates null to the default profile, meaning any user authenticated under the default profile inherits effective read access to sessions - and by extension, workspace files - originally belonging to the named profile. This is a server-side access control failure arising from an incomplete object construction pattern and a flawed null-equality assumption in the authorization predicate.

RemediationAI

Upgrade Hermes WebUI to version 0.51.521 or later, which is confirmed as the vendor-released fix per the GitHub release at https://github.com/nesquena/hermes-webui/releases/tag/v0.51.521. The underlying fix is documented in pull requests #4489 and #4506 and commit 3d5ef4758e920ba6888d49aaa4341de214693496. If an immediate upgrade is not operationally feasible, restrict network access to the /api/session/import endpoint at the reverse proxy or WAF layer for any users who should not cross profile boundaries - note this disables session import functionality entirely as a trade-off. As a compensating audit measure, query the persistence store for sessions with a null profile value and manually reassign correct profiles to limit ongoing exposure. Because the confidentiality impact is scoped to file content accessible via session identifiers, invalidating or rotating existing imported session tokens reduces the exploitable surface until patching is complete.