← All credits
Chia Min Jun Lennon
79 vulnerability records and advisories credit this contributor.
CVE-2026-22677
Hermes WebUI < 0.51.44 Path Traversal via Session Import Endpoint
CVE-2026-22207
OpenViking Missing root_api_key Allows Anonymous ROOT Access
CVE-2026-11322
Hermes WebUI before 0.51.221 Path Traversal via Symlink Workspace Bypass
CVE-2026-7875
NanoClaw Host/Container Filesystem Boundary Vulnerability via Outbound Attachment Handling
CVE-2026-7466
AgentFlow Arbitrary Python Pipeline Execution via pipeline_path
CVE-2026-7439
AgentFlow Local Web API Content-Type Validation Bypass
CVE-2026-53869
Hermes Agent < 0.16.0 - DNS Rebinding Bypass via WebSocket Endpoints
CVE-2026-53870
Hermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store Files
CVE-2026-41909
OpenClaw < 2026.4.20 - Improper Authorization in Paired-Device Pairing Actions