CVE-2026-14625
Last modified
CVE-2026-14625 is a medium-severity vulnerability rated 6.3/10 on the CVSS scale. A security flaw has been discovered in NousResearch hermes-agent up to 0.15.2. The affected element is the function shell.exec of the file tui_gateway/server.py. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
A security flaw has been discovered in NousResearch hermes-agent up to 0.15.2. The affected element is the function shell.exec of the file tui_gateway/server.py. The manipulation results in protection mechanism failure. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| NousResearch | hermes-agent | 0.15.0; 0.15.1; 0.15.2 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-14625?
How severe is CVE-2026-14625?
How do I fix CVE-2026-14625?
Related CVEs from 2026
- CVE-2026-1462A vulnerability in the `TFSMLayer` class of the `keras` pack…8.8
- CVE-2026-14620webpack-dev-server versions 5.2.5 and earlier expose two int…4.7
- CVE-2026-14621A vulnerability has been found in FederatedAI FATE up to 2.2…3.1
- CVE-2026-14622A vulnerability was found in jairiidriss restaurant-website-…7.3
- CVE-2026-14623A vulnerability was determined in omec-project amf up to 2.1…4.3
- CVE-2026-14624A vulnerability was identified in omec-project amf up to 2.0…4.3
- CVE-2026-14626A weakness has been identified in NousResearch hermes-agent …4.3
- CVE-2026-14627A security vulnerability has been detected in NousResearch h…5.6
- CVE-2026-14628A vulnerability was detected in NousResearch hermes-agent up…5.5
- CVE-2026-14629A flaw has been found in RT-Thread up to 5.2.2. Affected is …4.3
- CVE-2026-1463The Photo Gallery, Sliders, Proofing and Themes – NextGEN Ga…8.8
- CVE-2026-14630A vulnerability has been found in ForceInjection AI-funderme…3.1
Are you affected by CVE-2026-14625?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST