CVE-2026-18774
Received Received - Intake

Server-Side Request Forgery in NousResearch Hermes-Agent

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: VulDB

Description
A flaw has been found in NousResearch hermes-agent up to 0.16.0. This affects the function save_url_image of the file agent/image_gen_provider.py of the component xAI Image Generation Provider. This manipulation causes server-side request forgery. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-18774
EUVD
EUVD-2026-52764

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
nousresearch hermes-agent to 0.16.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Server-Side Request Forgery (SSRF) flaw in NousResearch Hermes-agent up to version 0.16.0. It occurs in the xAI Image Generation Provider component, specifically in the save_url_image function of agent/image_gen_provider.py. The issue allows a malicious or compromised provider to force Hermes-agent to fetch attacker-chosen URLs by returning a URL in the response instead of inline image data. Hermes-agent performs an unguarded fetch using requests.get() without proper URL safety checks or redirect validation.

Detection Guidance

Check Hermes-agent logs for unexpected outbound requests to internal or external URLs. Monitor network traffic for connections to localhost, 169.254.169.254 (cloud metadata), or other sensitive endpoints originating from Hermes-agent processes. Use tools like tcpdump or Wireshark to inspect traffic from Hermes-agent.

Impact Analysis

This SSRF vulnerability could allow attackers to access internal services, loopback addresses, or cloud metadata endpoints on the Hermes-agent host. An attacker could exploit this to exfiltrate sensitive data, interact with internal APIs, or perform reconnaissance on the network where Hermes-agent is deployed. The impact depends on the network configuration and services accessible from the host.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling unauthorized data exfiltration or access to internal systems. SSRF risks may allow attackers to access sensitive internal services or metadata endpoints, which could lead to data breaches or unauthorized data processing, violating GDPR principles like data protection by design and HIPAA's requirements for safeguarding protected health information.

Mitigation Strategies

Upgrade Hermes-agent to a patched version if available. If not, disable the xAI image-generation provider or restrict its network access. Implement URL validation and SSRF protections in Hermes-agent before fetching URLs from providers. Block outbound requests from Hermes-agent to internal or sensitive addresses.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18774. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart