CyberRota Analysis
AI-GeneratedHermes Agent versions prior to 0.19.0 are vulnerable due to a supply chain flaw in the bundled MCP catalog, allowing remote attackers to execute arbitrary code by compromising a mutable branch of a third-party upstream repository. This vulnerability enables attackers to propagate malicious code to all hosts that install the affected catalog entry without any additional action from the operator. Organizations using Hermes Agent should prioritize patching to mitigate the risk of remote code execution stemming from this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Hermes Agent 0.18.2 prior to 0.19.0 contains a supply chain vulnerability in its bundled MCP catalog that allows a remote attacker to execute arbitrary code by compromising a third-party upstream repository referenced via a mutable branch rather than a pinned commit SHA. An attacker who compromises the upstream repository can propagate malicious code to every host that installs the affected catalog entry, with no further action required by the operator.