CVE-2026-49958— Hermes WebUI < 0.51.303 TOCTOU Race Condition via git_discard
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| nesquena | hermes-webui | < 0.51.303 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-49958
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Hermes WebUI < 0.51.303 TOCTOU Race Condition via git_discard
Source: NVD (National Vulnerability Database)
Vulnerability Description
Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vulnerability in the git_discard function within api/workspace_git.py that allows attackers to delete files outside the configured workspace boundary by replacing a validated path component with a symlink after validation but before deletion. Attackers can substitute a workspace-controlled path component with a symlink pointing to an external directory between the safe_resolve_ws() validation step and the subsequent Path.unlink() or shutil.rmtree() deletion call, causing the delete operation to follow the symlink and remove arbitrary files outside the workspace.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
检查时间与使用时间(TOCTOU)的竞争条件
Source: NVD (National Vulnerability Database)
Vulnerability Title
Hermes Web UI 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Hermes Web UI是Nathan Esquenazi个人开发者的一个轻量级、暗色主题的自主智能体Web界面。 Hermes Web UI 0.51.303之前版本存在安全漏洞，该漏洞源于git_discard函数中的TOCTOU竞争条件问题，可能导致攻击者通过替换验证后的路径组件为符号链接删除工作空间边界外的文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| nesquena | hermes-webui | 0 ~ 0.51.303 | - |
II. Public POCs for CVE-2026-49958
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-49958
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-49958 (3)
Vendor Advisories for CVE-2026-49958 (1)
Vendor Pages for CVE-2026-49958 (1)
- 🔗 Release v0.51.303 · nesquena/hermes-webui · GitHubrelease-notes
Same Patch Batch · nesquena · 2026-06-09 · 5 CVEs total
| CVE-2026-49959 | 8.8 HIGH | Hermes WebUI < 0.51.311 RCE via Git Configuration Injection |
| CVE-2026-49957 | 7.7 HIGH | Hermes WebUI < 0.51.296 Workspace Boundary Bypass via api/workspace.py |
| CVE-2026-49956 | 6.5 MEDIUM | Hermes WebUI < 0.51.269 Profile Isolation Bypass via sessions search |
| CVE-2026-49955 | 5.3 MEDIUM | Hermes WebUI < 0.51.270 Resource Exhaustion via passkey/options |
IV. Related Vulnerabilities
Same product: hermes-webui
- CVE-2026-55205
Hermes WebUI < 0.51.468 - Resource Exhaustion via Unauthenti - CVE-2026-55198
Hermes WebUI < 0.51.443 - Cross-Profile Session Data Exfiltr - CVE-2026-55197
Hermes WebUI < 0.51.443 - Broken Access Control in /api/sess - CVE-2026-55196
Hermes WebUI < 0.51.409 - Unauthenticated Passkey Registrati - CVE-2026-53871
Hermes WebUI < 0.51.368 - Profile-Scoped Authorization Bypas
Same vendor: nesquena
- CVE-2026-55205
Hermes WebUI < 0.51.468 - Resource Exhaustion via Unauthenti - CVE-2026-55198
Hermes WebUI < 0.51.443 - Cross-Profile Session Data Exfiltr - CVE-2026-55197
Hermes WebUI < 0.51.443 - Broken Access Control in /api/sess - CVE-2026-53871
Hermes WebUI < 0.51.368 - Profile-Scoped Authorization Bypas - CVE-2026-49973
Hermes WebUI < 0.51.358 Unauthenticated Password Takeover vi
Same weakness: CWE-367
- CVE-2026-53945
Ghost: Server-side request forgery via DNS rebinding in exte - CVE-2026-54327
Pi: Race condition in auth.json writes could expose stored c - CVE-2026-48931
Node.js 22/24/26 HTTP Agent漏洞 - CVE-2026-41045
Weak polkit authentication check in qSnapper - CVE-2026-48983
pam_usb: TOCTOU race condition in pad directory creation all
V. Comments for CVE-2026-49958
No comments yet