This vulnerability involves a sandbox bypass or escape in the execute_code function of the hermes-agent tool by NousResearch, specifically in the Environment Variable Handler component. The issue allows remote attackers to manipulate the sandbox environment, potentially enabling unauthorized code execution or other impacts related to sandbox integrity. The affected versions include all releases up to 2026.4.16. The CVSS 4.0 base score is 6.9, indicating medium severity with network attack vector, low complexity, no privileges or user interaction required, and low impact on confidentiality, integrity, and availability. No official remediation or patch has been disclosed, and the vendor has not responded to the vulnerability report.

The vulnerability allows remote attackers to bypass or manipulate the sandbox environment in the hermes-agent, potentially leading to unauthorized code execution or other security impacts related to sandbox compromise. The impact on confidentiality, integrity, and availability is rated as low. No known exploits in the wild have been reported, but a public exploit exists.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official patch or workaround is available, users should consider restricting network exposure of the affected hermes-agent versions and monitor for suspicious activity related to code execution attempts. Avoid deploying affected versions in untrusted environments until a fix is released.