CVE Tools
Track your stack

Nousresearch

33 CVEs tracked since 2026. Since May 2026, none of them reached CISA KEV.

Nousresearch CVEs per month

May 2026 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Nousresearch CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0590
2026-0690
2026-0780
2026-08null or fewer
2026-0970

Products

The products that kept showing up in Nousresearch's monthly top three, with their CVEs summed over those months.

  1. Hermes-agent334 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Nousresearch.

  1. CVE-2026-71963Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection8.8
  2. CVE-2026-85107NousResearch hermes-agent Electron Main Process main.ts resourceBufferFromUrl allocation of resources4.3
  3. CVE-2026-85106NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgery6.3
  4. CVE-2026-85105NousResearch hermes-agent Session Management s71.py _sess_nowait authorization7.3
  5. CVE-2026-84289NousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocation4.3
  6. CVE-2026-84288NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of service4.3
  7. CVE-2026-84287NousResearch hermes-agent Session Chat api_server.py denial of service4.3
  8. CVE-2026-82021Hermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch Reference8.3
  9. CVE-2026-82020Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write Tool6.8
  10. CVE-2026-18993NousResearch hermes-agent Memory Toolset model_tools.py access control6.3
  11. CVE-2026-18976NousResearch hermes-agent disabled_toolsets agent_init.py get_tool_definitions privileges assignment6.3
  12. CVE-2026-18775NousResearch hermes-agent Browser Tooling browser_tool.py browser_snapshot server-side request forgery6.3
  13. CVE-2026-18774NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgery6.3
  14. CVE-2026-18773NousResearch hermes-agent Quick run.py _check_slash_access authorization6.3
  15. CVE-2026-17432NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control5.0

The record

Peak rank
#149 in May 2026
Busiest month shown
May 2026, 9 CVEs
Months with a KEV entry
0 since May 2026
Monthly snapshots
4 since 2026
Nousresearch's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store