CVE-2026-18773
Received Received - Intake

Incorrect Authorization in NousResearch Hermes-Agent via Quick Command Handler

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: VulDB

Description
A vulnerability was detected in NousResearch hermes-agent up to 2026.6.5. Affected by this issue is the function _check_slash_access of the file gateway/run.py of the component Quick Command Handler. The manipulation results in incorrect authorization. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-18773
EUVD
EUVD-2026-52727

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
nousresearch hermes-agent to 2026.6.5 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
CWE-285 The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in NousResearch hermes-agent up to version 2026.6.5 allows an authenticated non-admin user to bypass admin-only slash command restrictions. The issue occurs because Hermes enforces access controls only for registered slash commands but not for operator-configured quick commands. This enables non-admin users to execute admin-only quick commands, including shell command execution.

Detection Guidance

Check for unauthorized execution of admin-only quick commands by non-admin users. Monitor Hermes gateway logs for suspicious activity involving commands like /limits or other operator-configured quick commands. Verify if non-admin users can execute shell commands through quick commands.

Impact Analysis

An attacker could exploit this to run unauthorized shell commands in the gateway process context. This may lead to sensitive data exposure, system state modification, or service disruption depending on the quick command configuration. The exploit is public and can be launched remotely.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data or system modifications, which may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data privacy). Non-admin users exploiting quick commands might expose or alter protected information, triggering regulatory breaches.

Mitigation Strategies

Upgrade hermes-agent to a patched version (>2026.6.5). Disable or restrict access to quick commands for non-admin users. Implement strict authorization checks for all slash commands, including quick commands. Review and audit command configurations to ensure proper access controls.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18773. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart