PT-2026-50523

CVE-2026-55198

Published

2026-06-17

Updated

2026-09-17

Description by

CVSS 4.0

7.1

High

MetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Hermes WebUI versions prior to 0.51.443

Description An authorization bypass exists in the session export endpoint, allowing authenticated users to access sessions belonging to other profiles. The handle session export() function in 'api/routes.py' does not verify ownership of the active profile before serializing session data. This allows attackers to exfiltrate session transcripts from other users by knowing or guessing session identifiers.

Recommendations Update to version 0.51.443 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Hinotoi-Agent

Vendors

Affected products

Weakness enumeration

CWE-639: Authorization Bypass Through User-Controlled Key

Related identifiers