https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 14:22:49 +0000 https://db.gcve.eu/vuln/cve-2026-114463 <p><strong>Affected:</strong> Nous Research Hermes Agent</p> <p>The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{delivery_id} and re-derives the authorizing route by splitting that string, so a route name containing a &#34;:&#34; resolves toolset authorization to a different, higher-privileged prefix route than the one authenticated, which allows a remote attacker with the target HMAC to gain that higher-privileged route&#39;s toolsets.</p> <p><strong>Affected:</strong> Nous Research Hermes Agent</p> <p>The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{delivery_id} and re-derives the authorizing route by splitting that string, so a route name containing a &#34;:&#34; resolves toolset authorization to a different, higher-privileged prefix route than the one authenticated, which allows a remote attacker with the target HMAC to gain that higher-privileged route&#39;s toolsets.</p> https://db.gcve.eu/vuln/cve-2026-114463