CyberRota Analysis
AI-GeneratedHermes Agent versions 0.18.2 to 0.21.0 are vulnerable to a remote code execution flaw that allows attackers to run arbitrary OS commands via a malicious .git/config file. This vulnerability can lead to the exposure of sensitive environment variables, including API keys, when a user interacts with the compromised repository. Organizations using affected versions of Hermes Agent should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to execute arbitrary OS commands by supplying a malicious repository with a crafted .git/config that sets core.fsmonitor to an attacker-controlled command. When a user opens the malicious repository and sends any message, the agent triggers a git status index refresh which executes the injected command in the user's process context, exposing the full environment including configured provider API keys.