CVE-2026-14625

Name of the Vulnerable Software and Affected Versions NousResearch hermes-agent versions prior to 0.15.3

Description A security flaw exists that allows for the failure of protection mechanisms. This issue can be exploited remotely through the shell.exec() function located in the tui gateway/server.py file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the shell.exec() function in the tui gateway/server.py file to minimize the risk of exploitation.