Eric-Y

**Name of the Vulnerable Software and Affected Versions** hermes-agent versions prior to 0.16.1 **Description** A flaw in the xAI Image Generation Provider component allows for remote server-side request forgery (SSRF), a condition where an attacker can induce the server to make requests to an unintended location. The issue resides within the `save url image()` function located in the `agent/image gen provider.py` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the `save url image()` function.

A vulnerability has been found in NousResearch hermes-agent up to 0.16.0. This vulnerability affects the function browser snapshot of the file tools/browser tool.py of the component Browser Tooling. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent versions prior to 2026.6.6 **Description** An issue in the Quick Command Handler component allows for incorrect authorization. The flaw exists within the ` check slash access()` function located in the `gateway/run.py` file and can be exploited remotely. **Recommendations** As a temporary workaround, restrict access to the ` check slash access()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** zevorn rt-claw versions prior to 0.2.1 **Description** An issue in the Swarm RPC Receiver component allows for incorrect authorization. The flaw exists within the `handle rpc request()` function located in the `claw/services/swarm/swarm.c` file and can be exploited remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `handle rpc request()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** zevorn rt-claw versions prior to 0.2.1 **Description** A security flaw in the `http request` component allows for remote server-side request forgery. This issue occurs within the `receiver thread()` function located in the `claw/services/swarm/swarm.c` file. Server-side request forgery is a technique where an attacker induces a server-side application to make requests to an unintended location. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `receiver thread()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** zevorn rt-claw versions prior to 0.2.1 **Description** A server-side request forgery (SSRF) issue exists in the `http request` component. Remote exploitation is possible through the manipulation of the `url` argument within the `claw net get()` and `claw net post()` functions located in the `claw/services/tools/net.c` file. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `claw net get()` and `claw net post()` functions to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** zevorn rt-claw versions prior to 0.2.1 **Description** An issue exists in the `http request` component within the file `claw/tools/tool net.c`. Remote manipulation of the `url` variable passed to the `claw net get()` and `claw net post()` functions allows for server-side request forgery (SSRF), a condition where an attacker can induce the server to make requests to an unintended location. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the `claw net get()` and `claw net post()` functions.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent version 2026.5.29.2 **Description** A path traversal issue exists in the `skill view()` function within the tools/skills tool.py file. A remote attacker can exploit this by manipulating the `Name` argument, potentially allowing unauthorized access to files or directories on the system. **Recommendations** Apply patch 56f833efa427ccb444c0f9ad1759af1012f2124d to version 2026.5.29.2. As a temporary mitigation, restrict access to the `skill view()` function.

**Name of the Vulnerable Software and Affected Versions** nextlevelbuilder GoClaw versions prior to 3.13.0-beta.3 **Description** An issue exists in the WebSocket RPC Handler component within the `MethodRouter.Handle()` function of the `internal/gateway/router.go` file. This flaw allows for remote manipulation that leads to incorrect authorization. **Recommendations** Update nextlevelbuilder GoClaw to a version later than 3.13.0-beta.2. As a temporary mitigation, restrict access to the `MethodRouter.Handle()` function.

**Name of the Vulnerable Software and Affected Versions** TransformerOptimus SuperAGI versions prior to 0.0.15 **Description** An issue in the WebScraperTool component within the file superagi/helper/webpage extractor.py allows for server-side request forgery, which is a flaw where an attacker can induce the server to make requests to an unintended location. This can be triggered remotely through the functions `extract with bs4()`, `extract with 3k()`, or `extract with lxml()`. **Recommendations** As a temporary workaround, consider restricting the use of the functions `extract with bs4()`, `extract with 3k()`, and `extract with lxml()` until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** vibrantlabsai RAGAS versions prior to 0.4.4 **Description** A server-side request forgery exists in the Collections Module. A remote attacker can initiate this by manipulating the `retrieved contexts` argument within the ` try process local file()` and ` try process url()` functions located in the src/ragas/metrics/collections/multi modal faithfulness/util.py file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the ` try process local file()` and ` try process url()` functions.

**Name of the Vulnerable Software and Affected Versions** TransformerOptimus SuperAGI versions prior to 0.0.15 **Description** A path traversal issue exists in the Multipart Upload Handler component. The `Upload()` function within the file 'superagi/controllers/resources.py' does not properly handle the `Name` argument, allowing a remote attacker to perform path traversal. **Recommendations** Update to a version later than 0.0.14. As a temporary workaround, restrict access to the `Upload()` function in the 'superagi/controllers/resources.py' file to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions FoundationAgents MetaGPT versions up to 0.8.1 Description A flaw exists in the `check solution` function within the HumanEvalBenchmark/MBPPBenchmark component of FoundationAgents MetaGPT. Manipulation of this function can lead to code injection, potentially allowing remote attackers to compromise the system. The exploit is publicly available. Recommendations Update to a version beyond 0.8.1.

Name of the Vulnerable Software and Affected Versions Tencent AI-Infra-Guard version 4.0 Description A vulnerability exists in Tencent AI-Infra-Guard version 4.0, specifically within the Task Detail Endpoint component. The issue resides in an unknown function of the `task manager.go` file located in the `common/websocket/` directory. A manipulation of this component can lead to information disclosure. The attack can be initiated remotely. The exploit has been made public. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** frdel/agent0ai agent-zero version 0.9.7 **Description** A server-side request forgery condition exists in the `handle pdf document` function within the `python/helpers/document query.py` file. This manipulation can be carried out remotely. The exploit has been made publicly available. The vendor was contacted regarding this issue but did not respond. The API endpoint is not specified. The vulnerable parameter is not specified. **Recommendations** Versions prior to 0.9.7 are affected. As a temporary workaround, consider disabling the `handle pdf document()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** frdel/agent0ai agent-zero version 0.9.7-10 **Description** A security flaw exists in the `get abs path` function within the `python/helpers/files.py` file of agent-zero. This flaw allows for path traversal, potentially enabling remote attacks. The exploit for this issue has been publicly released. The vendor was notified but did not respond. **Recommendations** Versions prior to 0.9.7-10 are potentially affected. As a temporary workaround, consider restricting access to the `get abs path` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** vanna-ai vanna versions up to 2.0.2 **Description** A flaw exists in the `update sql` function within the `src/vanna/legacy/flask/ init .py` file of the Endpoint component. This issue allows for SQL injection, and can be exploited remotely. The exploit has been publicly disclosed. The vendor was informed of this disclosure but did not respond. **Recommendations** Versions prior to 2.0.2 should be updated. As a temporary workaround, consider restricting access to the `update sql()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** vanna-ai vanna versions up to 2.0.2 **Description** A flaw exists in the `update sql/run sql` function within the `src/vanna/legacy/flask/ init .py` file of the Endpoint component. This issue allows for server-side request forgery when a manipulation is performed. The attack can be initiated remotely. The exploit is publicly available. The vendor was notified but did not respond. **Recommendations** Versions prior to 2.0.2 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** vanna-ai vanna versions up to 2.0.2 **Description** A flaw exists in the `remove training data` function within the `src/vanna/legacy/google/bigquery vector.py` file. Manipulation of the `ID` argument can lead to SQL injection. This issue can be exploited remotely. The exploit has been published. The vendor was contacted regarding this disclosure but did not respond. **Recommendations** Versions prior to 2.0.3 should be updated. As a temporary workaround, consider restricting access to the `remove training data` function until a patch is available.