This vulnerability in NousResearch hermes-agent (versions 0.1 through 0.16.0) allows an attacker to manipulate the browser_snapshot function in the Browser Tooling component, leading to server-side request forgery (SSRF). SSRF vulnerabilities enable attackers to make the server perform unauthorized requests, potentially accessing internal resources. The vulnerability can be exploited remotely without user interaction and requires low privileges. The vendor was notified but has not provided a response or patch. No official remediation or patch is currently documented.

Successful exploitation of this SSRF vulnerability could allow an attacker to induce the affected server to send crafted requests to internal or external systems, potentially leading to information disclosure or interaction with internal services not otherwise accessible. The CVSS score of 5.3 reflects a medium impact with low attack complexity and no user interaction required. However, no known active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. Until a patch is available, consider restricting network access from the hermes-agent to sensitive internal resources and applying network-level controls to limit SSRF impact.