This vulnerability affects the save_url_image function in the agent/image_gen_provider.py file of the NousResearch hermes-agent product, versions 0.1 through 0.16.0. It allows an attacker to perform server-side request forgery, potentially causing the server to make unintended HTTP requests. The vulnerability can be exploited remotely without user interaction and requires low privileges. Although exploit code is publicly available, the vendor has not responded or provided a fix. No official remediation or patch has been published as of the disclosure date.

The SSRF vulnerability allows remote attackers to induce the server to make arbitrary HTTP requests, which could lead to information disclosure or interaction with internal systems not otherwise accessible. The impact is rated medium with limited scope and complexity, as indicated by the CVSS vector. There is no evidence of active exploitation in the wild at this time.

No official fix or patch is currently available from the vendor. Since the vendor did not respond to the disclosure, users should consider implementing network-level controls to restrict outbound requests from the affected component or isolate the hermes-agent service until a patch is released. Monitor official vendor channels for updates and apply any future patches promptly. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.