Is there a public PoC exploit available for CVE-2026-9369?

Yes, a public proof-of-concept exploit is available for CVE-2026-9369. Prioritise patching immediately. EPSS: 0.0%.

Is there a patch available for CVE-2026-9369?

Yes, a patch is available for CVE-2026-9369. Update the affected software to the latest version immediately.

hermes-agent CVE-2026-9369

Q: What is the CVSS score of CVE-2026-9369?

CVE-2026-9369 has a CVSS 4.0 base score of 1.9 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-31581 LOW

Incorrect Comparison (CWE-697)

2026-05-24 VulDB

GHSA-cv5c-mh6j-wvp9

Information Disclosure Hermes Agent

1.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

1.9 LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

May 26, 2026 - 19:52 NVD

MEDIUM LOW

CVSS changed

May 26, 2026 - 19:52 NVD

5.3 (MEDIUM) 1.9 (LOW)

Analysis Generated

May 24, 2026 - 09:31 vuln.today

DescriptionCVE.org

A security flaw has been discovered in NousResearch hermes-agent 2026.4.23. Affected is the function _discover_dashboard_plugins of the file hermes_cli/web_server.py of the component CLI web-dashboard Interface. Performing a manipulation of the argument HERMES_ENABLE_PROJECT_PLUGINS results in incorrect comparison. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Local privilege escalation in NousResearch hermes-agent 2026.4.23 allows authenticated local users to manipulate plugin discovery logic via HERMES_ENABLE_PROJECT_PLUGINS environment variable, resulting in unauthorized information disclosure and potential integrity compromise of the CLI web-dashboard interface. Publicly available exploit code exists (EPSS data not provided, not listed in CISA KEV). The vendor did not respond to responsible disclosure attempts, leaving remediation status uncertain.

Technical ContextAI

The vulnerability exists in the _discover_dashboard_plugins function within hermes_cli/web_server.py, part of the CLI web-dashboard interface of NousResearch hermes-agent. The flaw is classified as CWE-697 (Incorrect Comparison), indicating a logic error in how the code evaluates the HERMES_ENABLE_PROJECT_PLUGINS configuration parameter during plugin discovery. This incorrect comparison allows manipulation of the plugin loading mechanism, potentially enabling unauthorized plugins or bypassing security controls intended to restrict plugin execution. The CPE identifier (cpe:2.3:a:nousresearch:hermes-agent:*:*:*:*:*:*:*:*) indicates this affects the hermes-agent product from NousResearch, specifically version 2026.4.23 as noted in the description.

RemediationAI

No vendor-released patch identified at time of analysis due to vendor non-responsiveness to responsible disclosure. Organizations using hermes-agent 2026.4.23 should implement compensating controls: (1) Restrict local system access to the hermes-agent CLI web-dashboard to only trusted administrators - remove access for standard users, noting this may limit legitimate operational workflows. (2) Monitor and log all modifications to HERMES_ENABLE_PROJECT_PLUGINS environment variable through system auditing (auditd on Linux, Sysmon on Windows), though this provides detection rather than prevention. (3) Run hermes-agent processes under least-privilege service accounts that cannot modify system-wide plugin directories, which may constrain plugin functionality but limits blast radius. (4) Consider migrating to alternative AI agent frameworks with active vendor support if hermes-agent is not mission-critical, as vendor abandonment suggests future vulnerabilities will also remain unpatched. Evaluate forking the open-source project if continued use is necessary. Exploit code is available at https://gist.github.com/YLChen-007/062b77ceac6aa9844842a616f5d2ef30 and should be tested in isolated environments to validate control effectiveness.