Hermes Agent

Record description

Hermes Agent is Nous Research's open-source agent application with a dashboard and authentication control plane. Tenable Research credited Joshua Martinelle with three distinct dashboard findings first published October 9, 2026: a PKCE redirect parser differential allowing authorization-code redirection, persistent disk consumption through unbounded failed-login audit fields, and memory pressure from unbounded public authentication bodies. Maintainer fixes merged October 1 and October 5, with explicit 128-character provider, 256-character audit and 64 KiB public authentication body limits, plus canonical native loopback callback enforcement. The stable 0.21.6 release was tagged October 8 for Docker/CLI distribution, while its own notes state the Desktop and Termux bundles did not update then. These vulnerabilities are reported in the agent application control plane, not a proof of prompt injection, model misbehavior or in-the-wild victim compromise. A separate earlier GitSpawn research case involving Hermes Agent remains distinct.

Explicitly related research (5)

Declared connections