This vulnerability affects the check_all_command_guards function in the tools/approval.py file of the Batch Runner component in NousResearch hermes-agent up to version 2026.4.16. The issue is a missing authorization control, allowing remote attackers to manipulate the system without proper permissions. The CVSS 4.0 score is 6.9 (medium severity), reflecting network attack vector, no privileges required, no user interaction, and low to limited confidentiality, integrity, and availability impacts. The vendor has not provided any advisory or patch, and the exploit code is publicly available.

Successful exploitation allows remote attackers to bypass authorization checks, potentially leading to unauthorized actions within the affected component. The impact is rated medium with limited confidentiality, integrity, and availability consequences. No known exploits are reported in the wild, but public exploit code exists.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should monitor official channels for updates. Until a patch is available, consider restricting network access to the hermes-agent service to trusted sources to reduce exposure.