The vulnerability identified as CVE-2026-18976 affects NousResearch hermes-agent versions up to 0.16.0. It involves the get_tool_definitions function within the agent/agent_init.py file, specifically in the disabled_toolsets Handler component. This flaw leads to incorrect privilege assignment, potentially allowing an attacker with network access and low privileges to escalate their privileges without user interaction. The vulnerability has been publicly disclosed, and the project was notified early via an issue report. The CVSS v3.1 base score is 6.3, reflecting a network attack vector with low attack complexity, requiring low privileges, no user interaction, and impacts on confidentiality, integrity, and availability at a low level.

The vulnerability allows an attacker to manipulate privilege assignments incorrectly, potentially leading to unauthorized access or actions within the affected system. The impact is rated as low severity, with limited confidentiality, integrity, and availability impacts. No active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, limit network exposure of the affected component and restrict privileges where possible to reduce risk.