This vulnerability exists in the browser_snapshot function of the browser_tool.py file within the Browser Tooling component of NousResearch hermes-agent versions up to 0.16.0. It allows an attacker to perform server-side request forgery (SSRF), potentially causing the server to make unintended HTTP requests. The vulnerability can be exploited remotely without user interaction and requires low privileges. The vendor was contacted but has not provided any response or fix. No patch or official remediation guidance is currently available.

The SSRF vulnerability could allow an attacker to make arbitrary requests from the vulnerable server, potentially accessing internal resources or services not intended to be exposed. The CVSS score of 5.3 (medium severity) reflects limited but notable impact, including low complexity and no user interaction required. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should consider implementing network-level controls to restrict outgoing requests from the affected component and monitor for suspicious activity related to server requests. Avoid exposing the vulnerable functionality to untrusted inputs where possible.