This vulnerability exists in the _make_run_env function of the tools/environments/local.py file within the Messaging Gateway Handler component of NousResearch hermes-agent up to version 2026.4.23. An attacker can manipulate this function remotely to cause information disclosure. The CVSS 4.0 base score is 6.9 (medium severity) with network attack vector, low complexity, no privileges required, no user interaction, and low impact on confidentiality. No official remediation or patch has been provided by the vendor, and the exploit has been publicly disclosed.

Successful exploitation can lead to unauthorized disclosure of information from the affected system. The vulnerability can be exploited remotely without authentication or user interaction. The impact is limited to information disclosure with low confidentiality impact as per CVSS metrics. There is no indication of privilege escalation, integrity, or availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, organizations should monitor for updates from NousResearch. Until a patch is released, consider restricting network access to the hermes-agent service to trusted sources to reduce exposure.