Hermes WebUI before version 0.51.221 contains a CWE-59 improper link resolution vulnerability. Attackers can exploit the workspace file and listing APIs by providing symlinks that resolve to locations outside the workspace root. Because the application does not verify that the resolved path remains within the workspace, this allows unauthorized reading of arbitrary files accessible to the server process. The vulnerability can lead to disclosure of sensitive host files including SSH keys and cloud credentials. The CVSS 3.1 base score is 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N), reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, and high confidentiality impact without integrity or availability impact. No patch or official remediation level has been published by the vendor as of the publication date.

Successful exploitation allows an attacker with limited privileges to read arbitrary files on the server hosting Hermes WebUI by bypassing workspace directory restrictions via symlink resolution. This can lead to disclosure of sensitive information such as SSH private keys, cloud service credentials, and application tokens. There is no indication of integrity or availability impact. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Hermes WebUI server to trusted users only and monitor for suspicious activity. Avoid exposing the service to untrusted networks. Do not rely on the workspace file and listing APIs for sensitive operations without additional access controls.