CVE-2026-82020: Files or Directories Accessible to External Parties in NousResearch hermes-agent

CVE-2026-82020 affects Hermes Agent versions >=0.16.0 and <0.17.0. The vulnerability arises from improper path restriction controls that fail to exclude the auth.json credential store file from being overwritten. Attackers who can influence the content of ingested messages can craft malicious payloads that bypass sensitive-path guards, causing the agent's file-write tooling to overwrite the credential store without triggering protections. This enables unauthorized modification of credentials or unauthorized access to the system. The CVSS 4.0 vector indicates network attack vector, high complexity, no privileges required, user interaction required, and high impact on confidentiality and integrity.

Successful exploitation allows attackers to overwrite the credential store file (auth.json), potentially leading to credential tampering or unauthorized access. This compromises the confidentiality and integrity of authentication credentials managed by Hermes Agent, which could facilitate further unauthorized actions within the affected environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict or monitor the ability of untrusted users to influence ingested message content that the Hermes Agent processes to reduce the risk of exploitation.