CVE-2026-53871

Name of the Vulnerable Software and Affected Versions Hermes WebUI versions prior to 0.51.368

Description An authorization bypass exists in the get profile cookie() function, which accepts unauthenticated profile names from the hermes profile cookie. An authenticated attacker can forge the value of the hermes profile cookie to bypass profile-scoped authorization checks, allowing unauthorized access to sessions, files, and resources across different profiles.

Recommendations Update to version 0.51.368 or later. As a temporary workaround, restrict or monitor the use of the hermes profile cookie to minimize the risk of exploitation.