Eric-I

**Name of the Vulnerable Software and Affected Versions** Sipeed PicoClaw versions prior to 0.3.0 **Description** An authentication bypass exists in the First Run Setup component within the `web/backend/middleware/access control.go` file. A remote attacker can bypass authentication using an alternate channel by manipulating the `allowed cidrs` argument. CIDR (Classless Inter-Domain Routing) is a method for allocating IP addresses and routing IP packets. **Recommendations** Apply patch 017601354be38cb027ff3ffb01aed79bd5d12610 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Sipeed PicoClaw versions prior to 0.2.10 **Description** An issue exists in an unknown function within the `web/backend/api/auth.go` file that allows remote attackers to perform cross-site request forgery (CSRF), a technique where a malicious website causes a user's web browser to perform an unwanted action on a different website where the user is authenticated. **Recommendations** Apply patch 4b0229351678f479429b8d8b19207757266f246b to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Sipeed PicoClaw versions prior to 0.3.0 **Description** A time-of-check time-of-use (TOCTOU) issue exists in the `ExecTool.executeRun()` function within the `pkg/agent/pipeline execute.go` file. This occurs when the `cwe` argument is manipulated, allowing a local attacker to exploit the race condition between the time a condition is checked and the time it is used. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sipeed PicoClaw versions prior to 0.3.0 **Description** An authentication bypass exists in the LINE Webhook component due to a capture-replay flaw. A remote attacker can exploit this by manipulating the `webhook.ParseRequest()` function within the `pkg/channels/line/line.go` file. Capture-replay is a technique where a valid data transmission is recorded and then re-sent to the system to trick it into granting unauthorized access. **Recommendations** Update Sipeed PicoClaw to version 0.3.0 or later. As a temporary mitigation, restrict access to the LINE Webhook component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Sipeed PicoClaw versions prior to 0.3.0 **Description** An issue exists in the `web fetch()` function within the `pkg/tools/integration/web.go` file that allows for server-side request forgery (SSRF), a condition where an attacker can induce the server to make requests to an unintended location. This flaw enables remote exploitation. **Recommendations** Deploy patch c15aac21fe05ee103a470e1104bc891754e83392 for versions prior to 0.3.0.

**Name of the Vulnerable Software and Affected Versions** Sipeed PicoClaw versions prior to 0.3.0 **Description** A local code inclusion issue exists in the `NewContextBuilder()` function within the `pkg/agent/context.go` file. This flaw allows a local attacker to include functionality from an untrusted control sphere into the application. **Recommendations** Update Sipeed PicoClaw to a version newer than 0.2.9. As a temporary mitigation, restrict local access to the system to prevent unauthorized interaction with the `NewContextBuilder()` function.

**Name of the Vulnerable Software and Affected Versions** Sipeed PicoClaw versions prior to 0.3.0 **Description** A security flaw in the Group Message Handler component allows for incorrect authorization. The issue resides in the `dispatchIncoming()` function within the `pkg/channels/wecom/wecom.go` file and can be exploited remotely. **Recommendations** Update to a version newer than 0.2.9. As a temporary mitigation, restrict access to the `dispatchIncoming()` function.

**Name of the Vulnerable Software and Affected Versions** Sipeed PicoClaw versions prior to 0.2.10 **Description** A weakness in the `web fetch` component allows for remote server-side request forgery. The issue resides within the `isPrivateOrRestrictedIP()` function located in the `pkg/tools/integration/web.go` file. **Recommendations** Deploy patch 2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405 for versions prior to 0.2.10.

**Name of the Vulnerable Software and Affected Versions** Sipeed PicoClaw versions prior to 0.3.0 **Description** An issue in the Group Message Handler component allows for missing authorization. This occurs within the `handleMessageReceive()` function located in the `pkg/channels/feishu/feishu 64.go` file. The flaw can be exploited remotely. **Recommendations** Update Sipeed PicoClaw to version 0.3.0 or later. As a temporary mitigation, restrict access to the `handleMessageReceive()` function.

**Name of the Vulnerable Software and Affected Versions** Sipeed PicoClaw versions prior to 0.3.0 **Description** An issue exists in the `rt.ReloadConfig()` function within the `pkg/channels/pico/pico.go` file. Manipulating the `message.send` argument allows a remote attacker to bypass authorization. **Recommendations** Update Sipeed PicoClaw to a version later than 0.2.9. As a temporary mitigation, restrict access to the `rt.ReloadConfig()` function.

**Name of the Vulnerable Software and Affected Versions** hermes-agent versions prior to 2026.4.17 **Description** A remote issue exists in the Slack Agent/Mattermost Agent component of NousResearch hermes-agent. Manipulation of the `format message` argument leads to output escaping. **Recommendations** Update to a version later than 2026.4.16. As a temporary workaround, restrict the use of the `format message` argument within the Slack Agent/Mattermost Agent component.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent version 2026.4.23 **Description** A remote injection issue exists in the ` scan context content()` function within the `agent/prompt builder.py` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the ` scan context content()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent versions prior to 5157f5427f19488b31c6fdebbacd15d798ce7f63 **Description** An OS command injection issue exists in the `terminal tool` component, specifically within the `detect dangerous command()` function located in the `tools/approval.py` file. This flaw allows a remote attacker to execute arbitrary operating system commands. **Recommendations** Update to a version later than 5157f5427f19488b31c6fdebbacd15d798ce7f63. As a temporary workaround, restrict access to the `detect dangerous command()` function in the `tools/approval.py` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** hermes-agent versions prior to 2026.4.17 **Description** A remote attack can be launched against the Environment Variable Handler component. The issue resides in the `execute code()` function within the `tools/code execution tool.py` file, where manipulation can lead to a sandbox issue, potentially allowing code to escape the restricted execution environment. **Recommendations** Update to a version later than 2026.4.16. As a temporary workaround, restrict access to the `execute code()` function in the `tools/code execution tool.py` file.

**Name of the Vulnerable Software and Affected Versions** hermes-agent version 2026.4.23 **Description** A security flaw exists in the CLI web-dashboard Interface within the ` discover dashboard plugins()` function of the `hermes cli/web server.py` file. A manipulation of the `HERMES ENABLE PROJECT PLUGINS` argument leads to an incorrect comparison. This issue requires local access to be exploited. **Recommendations** As a temporary workaround, restrict access to the ` discover dashboard plugins()` function or avoid manipulating the `HERMES ENABLE PROJECT PLUGINS` argument until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent versions prior to 2026.4.23 **Description** An injection issue exists in the Skills Guard Multi-Word Prompt Handler component within the file agent/skills guard.py. The flaw allows remote exploitation through the manipulation of the `THREAT PATTERNS` argument. **Recommendations** Update to a version later than 2026.4.23. As a temporary mitigation, restrict the use of the `THREAT PATTERNS` argument in the agent/skills guard.py file.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent versions prior to 2026.4.24 **Description** A weakness in the Messaging Gateway Handler component allows for remote information disclosure. The issue is located within the ` make run env()` function in the `tools/environments/local.py` file. **Recommendations** Update to a version later than 2026.4.23. As a temporary workaround, restrict access to the ` make run env()` function in the `tools/environments/local.py` file to minimize the risk of exploitation.