CVE-2026-9366: hermes-agent has an Injection issue

May 26, 2026 (updated June 30, 2026)

A vulnerability was found in NousResearch hermes-agent 2026.4.23. The impacted element is the function _scan_context_content of the file agent/prompt_builder.py. The manipulation results in injection. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

References

gist.github.com/YLChen-007/581fd92de5548fbaacb2092e848a75cc
github.com/NousResearch/hermes-agent/commit/0dee92df22bdc0cfbcad90ca954aa14916f018de
github.com/advisories/GHSA-pgp4-xr4j-h5cg
nvd.nist.gov/vuln/detail/CVE-2026-9366
vuldb.com/submit/812227
vuldb.com/vuln/365329
vuldb.com/vuln/365329/cti

Code Behaviors & Features

Detect and mitigate CVE-2026-9366 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →