Threats tagged 'brew-hermes-agent-cve-2026-48522'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.2	EPSS 0.2%	CVE-2026-48522hermes-agent · PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file://, ftp://, data Medium4.2EPSS 0.2%2026-08-13GCVE DatabaseCVE-2026-48522 PyJWKClient in PyJWT versions before 2026.7.1 does not restrict URL schemes when fetching JSON Web Key Sets (JWKS), allowing attacker-controlled URLs with schemes like file://, ftp://, or data:. This can lead to server-side request forgery (SSRF) to local files or other resources. Additionally, if an attacker can write to a location referenced by a file:// URL, they can forge JWT tokens that the application will accept as valid. The vulnerability is fixed in version 2026.7.1 by adding an allowed schemes whitelist. EPSS 0.2%Report on CVE-2026-48522 Vulnerability #brew-hermes-agent-cve-2026-48522 #homebrew	GCVE Database	2026-08-13

Page 1 of 1