CVE-2026-18993

MEDIUM

CVE: CVE-2026-18993 - A vulnerability was detected in NousResearch hermes-agent up to 0Sign in to save

CVSS

6.3

CVSS v3.1

EPSS

0.2%

Exploit Prediction Score

Published

August 6, 2026

Exploitability

EPSS probability 0.2%

Description

A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/model_tools.py of the component Memory Toolset. The manipulation results in improper access controls. The attack can be executed remotely. The exploit is now public and may be used.

Weaknesses

CWE-266CWE-284

Affected Packages

No package data available.

Aliases

CVE-2026-18993

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://github.com/NousResearch/hermes-agent/
https://github.com/NousResearch/hermes-agent/issues/46171
https://github.com/NousResearch/hermes-agent/issues/48181
https://github.com/NousResearch/hermes-agent/pull/46185
https://vuldb.com/cve/CVE-2026-18993
https://vuldb.com/submit/862610
https://vuldb.com/vuln/386377
https://vuldb.com/vuln/386377/cti