CVE-2026-9368: hermes-agent has a sandbox issue

May 26, 2026 (updated June 30, 2026)

A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This impacts the function execute_code of the file tools/code_execution_tool.py of the component Environment Variable Handler. Such manipulation leads to sandbox issue. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

References

gist.github.com/YLChen-007/43c72d19668421abe8ce10f299323a0a
github.com/NousResearch/hermes-agent/commit/285bb2b9150b93445e5eded9bc897a4001b66e55
github.com/advisories/GHSA-wm96-9gfh-vvgq
nvd.nist.gov/vuln/detail/CVE-2026-9368
vuldb.com/submit/812229
vuldb.com/vuln/365331
vuldb.com/vuln/365331/cti

Code Behaviors & Features

Detect and mitigate CVE-2026-9368 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →