The NousResearch hermes-agent up to version 2026.5.16 contains a path traversal vulnerability in the extract_media function of gateway/platforms/base.py in the Live Webhook Endpoint component. This vulnerability allows an unauthenticated remote attacker to manipulate input to traverse directories, potentially accessing unauthorized files. The vulnerability has a CVSS 4.0 score of 6.9, indicating medium severity. The vendor was contacted but did not provide any response or patch. Exploit code is publicly available, increasing the risk of exploitation.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to perform path traversal attacks, potentially accessing or manipulating files outside the intended directory scope. This could lead to unauthorized disclosure or modification of sensitive data. However, there is no indication of privilege escalation, denial of service, or integrity violations beyond the path traversal itself. No known active exploitation in the wild has been reported.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded and no fix is published, users should consider implementing network-level protections such as restricting access to the Live Webhook Endpoint and monitoring for suspicious input patterns that could indicate path traversal attempts. Stay alert for any future vendor advisories or patches and apply them promptly once available.