Is there a public PoC exploit available for CVE-2026-7396?

Yes, a public proof-of-concept exploit is available for CVE-2026-7396. Prioritise patching immediately. EPSS: 0.0%.

hermes-agent CVE-2026-7396

Q: What is the CVSS score of CVE-2026-7396?

CVE-2026-7396 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-26267 MEDIUM

Path Traversal (CWE-22)

2026-04-29 VulDB

Path Traversal Hermes Agent

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.3 MEDIUM

Network-reachable unauthenticated read-only path traversal with no scope change; confidentiality-only impact at low severity maps to C:L/I:N/A:N.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 24, 2026 - 01:37 vuln.today

PoC Detected

Apr 29, 2026 - 21:16 vuln.today

Public exploit code

CVSS changed

Apr 29, 2026 - 18:22 NVD

5.3 (MEDIUM) 5.5 (MEDIUM)

EUVD ID Assigned

Apr 29, 2026 - 18:00 euvd

EUVD-2026-26267

CVE Published

Apr 29, 2026 - 17:30 nvd

MEDIUM 5.5

DescriptionCVE.org

A vulnerability was identified in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/wecom.py of the component WeChat Work Platform Adapter. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

AnalysisAI

Path traversal in NousResearch hermes-agent 0.8.0 exposes arbitrary server-side files to unauthenticated remote attackers through the WeChat Work (WeCom) platform adapter component. The vulnerability resides in gateway/platforms/wecom.py and is limited to confidentiality impact (VC:L), with no integrity or availability consequence. A public proof-of-concept exists per GitHub issue reference, though EPSS of 0.05% (15th percentile) and SSVC's 'Automatable: no' designation indicate constrained real-world exploitation risk; no CISA KEV listing has been confirmed.

Technical ContextAI

CWE-22 (Path Traversal) describes a failure to neutralize special directory-navigation sequences (e.g., '../') in user-controlled input before using it to construct file-system paths. Here, the vulnerable component is the WeChat Work (企业微信/WeCom) platform integration adapter within hermes-agent, an AI agent orchestration framework by NousResearch. The affected file gateway/platforms/wecom.py processes input - likely a filename or path parameter supplied through the WeCom messaging webhook or API surface - without sufficient sanitization, allowing traversal outside the intended working directory. CPE cpe:2.3:a:nousresearch:hermes-agent:*:*:*:*:*:*:*:* confirms the scope is the nousresearch vendor's hermes-agent application.

RemediationAI

No vendor-released patch version has been identified at time of analysis. The vulnerability is tracked via a public GitHub issue at https://github.com/NousResearch/hermes-agent/issues/8733 - monitor that issue and the upstream repository (https://github.com/NousResearch/hermes-agent/) for a patched release. As an immediate compensating control, disable or restrict network access to the WeCom platform adapter endpoint if the WeChat Work integration is not operationally required; this eliminates the attack surface entirely with no functional cost to deployments not using that integration. If WeCom must remain enabled, implement an application-layer web firewall or reverse proxy rule to reject requests containing path traversal sequences (../, %2e%2e%2f, and URL-encoded variants) targeting the wecom.py handler. File-system-level hardening (running the process with minimal permissions and chroot/container isolation) limits the blast radius of any successful traversal to files accessible by the process user.