CyberRota Analysis
AI-GeneratedA vulnerability exists in the SimpleX Gateway Authorization component of NousResearch hermes-agent version 2026.6.5, allowing improper access control through manipulation of the contactId argument in the adapter.py file. Although the attack requires high complexity and is challenging to exploit, it can be executed remotely, posing a risk to affected systems. Organizations using this version of the software should prioritize applying the patch (490c486ff65b766d9de0fe0e6f26e1778aaa8fb3) to mitigate potential security threats.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/simplex/adapter.py of the component SimpleX Gateway Authorization. The manipulation of the argument contactId results in improper access controls. The attack may be launched remotely. A high complexity level is associated with this attack. The exploitation appears to be difficult. The exploit is now public and may be used. The patch is identified as 490c486ff65b766d9de0fe0e6f26e1778aaa8fb3. Applying a patch is advised to resolve this issue.