CVE-2026-53871

Deferred Deferred - Pending Action

Authorization Bypass in Hermes WebUI via Cookie Forgery

Publication date: 2026-06-17

Last updated on: 2026-06-18

Assigner: VulnCheck

Description

Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the get_profile_cookie() function that accepts unauthenticated profile names from the hermes_profile cookie. An authenticated attacker can forge the hermes_profile cookie value to bypass profile-scoped authorization checks and access sessions, files, and resources across different profiles.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-17

Last Modified

2026-06-18

Generated

2026-07-08

AI Q&A

2026-06-18

EPSS Evaluated

2026-07-06

NVD

CVE-2026-53871

EUVD

EUVD-2026-37776

Affected Vendors & Products

Vendor	Product	Version / Range
hermes	hermes_webui	to 0.51.368 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-565	The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly ensure that the setting is valid for the associated user.

Attack-Flow Graph

Executive Summary

Hermes WebUI before version 0.51.368 has an authorization bypass vulnerability in the get_profile_cookie() function. This function accepts unauthenticated profile names from the hermes_profile cookie. Because of this, an authenticated attacker can forge the hermes_profile cookie value to bypass profile-scoped authorization checks.

This allows the attacker to access sessions, files, and resources across different profiles that they should not normally be able to access.

Impact Analysis

This vulnerability can allow an authenticated attacker to bypass authorization controls and gain unauthorized access to sessions, files, and resources belonging to other profiles.

Such unauthorized access can lead to data exposure, potential data manipulation, and compromise of sensitive information across different user profiles.

Hi! I’m here to help you understand CVE-2026-53871. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70