CVE-2026-10221— NousResearch hermes-agent run_agent.py _compress_context injection

CVSS 7.3 · High EPSS 0.05% · P15 Updated Jun 01, 2026

Possible ATT&CK Techniques 1AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 12

Vendor	Product	Version Range	Status
NousResearch	hermes-agent	`0.1`	affected
		`0.2`	affected
		`0.3`	affected
		`0.4`	affected
		`0.5`	affected
		`0.6`	affected
		`0.7`	affected
		`0.8`	affected
… +4 more rows

Get alerts for future matching vulnerabilitiesLog in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

NousResearch hermes-agent run_agent.py _compress_context injection

Source: NVD (National Vulnerability Database)

Vulnerability Description

A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Source: NVD (National Vulnerability Database)

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Source: NVD (National Vulnerability Database)

Vulnerability Type

输出中的特殊元素转义处理不恰当(注入)

Source: NVD (National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
NousResearch	hermes-agent	0.1	`cpe:2.3:a:nousresearch:hermes-agent::::::::`

II. Public POCs for CVE-2026-10221

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2026-10221

请登录查看更多情报信息。

Proof of Concept for CVE-2026-10221 (1)

🔗 Prompt Injection via Synthetic User Message in Todo Snapshot After Context Compression · GitHub Read full article exploit

https://nvd.nist.gov/vuln/detail/CVE-2026-10221

Same Patch Batch · NousResearch · 2026-06-01 · 5 CVEs total

CVE-2026-10220	7.3 HIGH	NousResearch hermes-agent skills_tool.py skill_view injection
CVE-2026-10223	6.3 MEDIUM	NousResearch hermes-agent memory_tool.py _scan_memory_content injection
CVE-2026-10222	5.6 MEDIUM	NousResearch hermes-agent config.py _sanitize_env_lines injection
CVE-2026-10224	5.3 MEDIUM	NousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource cons

IV. Related Vulnerabilities

Same product: hermes-agent

Same vendor: NousResearch

Same weakness: CWE-74

V. Comments for CVE-2026-10221

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-10221— NousResearch hermes-agent run_agent.py _compress_context injection

Possible ATT&CK Techniques 1AI

Affected Version Matrix 12

I. Basic Information for CVE-2026-10221

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-10221

III. Intelligence Information for CVE-2026-10221

Proof of Concept for CVE-2026-10221 (1)

Same Patch Batch · NousResearch · 2026-06-01 · 5 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-10221

Leave a comment