CVE-2026-114463: CWE-863 Incorrect Authorization in Nous Research Hermes Agent

The webhook platform gateway in Nous Research Hermes Agent constructs session chat IDs as webhook:{route_name}:{delivery_id}. It then re-derives the authorizing route by splitting this string. If the route name includes a colon character, the authorization logic mistakenly resolves to a different, higher-privileged prefix route than the one authenticated. This flaw enables a remote attacker with the correct HMAC to escalate privileges by accessing toolsets associated with the higher-privileged route.

An attacker who can supply a target HMAC and craft a route name containing a colon can bypass intended authorization boundaries and gain access to higher-privileged toolsets within the Hermes Agent. This unauthorized privilege escalation could lead to misuse or compromise of sensitive functions or data accessible through those toolsets.

No vendor advisory or patch information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Hermes Agent webhook platform gateway to trusted parties only and monitor for unusual activity involving route names containing colons.