Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

NousResearch — Vulnerabilities & Security Advisories 35

Browse all 35 CVE security advisories affecting NousResearch. AI-powered Chinese analysis, POCs, and references for each vulnerability.

NousResearch develops AI research tools and platforms, focusing on advanced machine learning and data analysis solutions. Historically, their systems have been susceptible to remote code execution (RCE) and cross-site scripting (XSS) vulnerabilities, often stemming from improper input validation and insecure API endpoints. While no major public security incidents have been documented, the organization maintains a moderate vulnerability profile with four CVEs recorded to date. Their security posture appears typical for AI research platforms, balancing functionality with basic security measures. The company's codebase and infrastructure remain subject to standard web application risks, though no systemic weaknesses or high-impact breaches have been reported in their public-facing services.

Top products by NousResearch: hermes-agent
CVE IDTitleCVSSSeverityPublished
CVE-2026-18993 NousResearch hermes-agent Memory Toolset model_tools.py access control — hermes-agentCWE-284 6.3 Medium2026-08-06
CVE-2026-18976 NousResearch hermes-agent disabled_toolsets agent_init.py get_tool_definitions privileges assignment — hermes-agentCWE-266 6.3 Medium2026-08-06
CVE-2026-18775 NousResearch hermes-agent Browser Tooling browser_tool.py browser_snapshot server-side request forgery — hermes-agentCWE-918 6.3 Medium2026-08-04
CVE-2026-18774 NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgery — hermes-agentCWE-918 6.3 Medium2026-08-04
CVE-2026-18773 NousResearch hermes-agent Quick run.py _check_slash_access authorization — hermes-agentCWE-863 6.3 Medium2026-08-04
CVE-2026-17432 NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control — hermes-agentCWE-284 5.0 Medium2026-07-26
CVE-2026-15311 NousResearch hermes-agent Matrix Adapter matrix.py MatrixAdapter._markdown_to_html cross site scripting — hermes-agentCWE-79 3.5 Low2026-07-09
CVE-2026-14783 NousResearch hermes-agent skills_tool.py skill_view path traversal — hermes-agentCWE-22 4.3 Medium2026-07-05
CVE-2026-14628 NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversal — hermes-agentCWE-22 5.3 Medium2026-07-04
CVE-2026-14627 NousResearch hermes-agent Discord Platform Integration discord.py DiscordAdapter._is_allowed_user improper authentication — hermes-agentCWE-287 5.6 Medium2026-07-04
CVE-2026-14626 NousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation denial of service — hermes-agentCWE-404 4.3 Medium2026-07-04
CVE-2026-14625 NousResearch hermes-agent server.py shell.exec protection mechanism — hermes-agentCWE-693 6.3 Medium2026-07-04
CVE-2026-14617 NousResearch hermes-agent Streaming Reasoning Tag Filter stream_consumer.py GatewayStreamConsumer._filter_and_accumulate case sensitivity — hermes-agentCWE-178 3.1 Low2026-07-03
CVE-2026-53870 Hermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store Files — hermes-agentCWE-276 5.5 Medium2026-06-17
CVE-2026-53869 Hermes Agent < 0.16.0 - DNS Rebinding Bypass via WebSocket Endpoints — hermes-agentCWE-306 7.5 High2026-06-17
CVE-2026-11461 NousResearch hermes-agent resume Endpoint hermes_state.py resolve_session_by_title authorization — hermes-agentCWE-639 6.3 Medium2026-06-07
CVE-2026-10548 NousResearch hermes-agent Credential Pool Synchronization credential_pool.py _sync_anthropic_entry_from_credentials_file improper authentication — hermes-agentCWE-287 5.3 Medium2026-06-02
CVE-2026-10224 NousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource consumption — hermes-agentCWE-400 5.3 Medium2026-06-01
CVE-2026-10223 NousResearch hermes-agent memory_tool.py _scan_memory_content injection — hermes-agentCWE-74 6.3 Medium2026-06-01
CVE-2026-10222 NousResearch hermes-agent config.py _sanitize_env_lines injection — hermes-agentCWE-74 5.6 Medium2026-06-01
CVE-2026-10221 NousResearch hermes-agent run_agent.py _compress_context injection — hermes-agentCWE-74 7.3 High2026-06-01
CVE-2026-10220 NousResearch hermes-agent skills_tool.py skill_view injection — hermes-agentCWE-74 7.3 High2026-06-01
CVE-2026-9369 NousResearch hermes-agent CLI web-dashboard web_server.py _discover_dashboard_plugins comparison — hermes-agentCWE-697 5.3 Medium2026-05-24
CVE-2026-9368 NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandbox — hermes-agentCWE-265 7.3 High2026-05-24
CVE-2026-9367 NousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injection — hermes-agentCWE-78 7.3 High2026-05-24
CVE-2026-9366 NousResearch hermes-agent prompt_builder.py _scan_context_content injection — hermes-agentCWE-74 7.3 High2026-05-24
CVE-2026-9354 NousResearch hermes-agent Slack Agent/Mattermost Agent escape output — hermes-agentCWE-116 6.5 Medium2026-05-24
CVE-2026-9353 NousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injection — hermes-agentCWE-74 7.3 High2026-05-24
CVE-2026-9352 NousResearch hermes-agent Messaging Gateway local.py _make_run_env information disclosure — hermes-agentCWE-200 5.3 Medium2026-05-24
CVE-2026-9351 NousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversal — hermes-agentCWE-22 6.5 Medium2026-05-24

This page lists every published CVE security advisory associated with NousResearch. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.