Vulnerability Description
Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the session search endpoint without active-profile filtering. Attackers can send requests to the sessions search handler to retrieve session titles and transcript message content from profiles other than their own active profile.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/nesquena/hermes-webui/commit/2c7b530071bb29ae4184e83e33be5799
- https://github.com/nesquena/hermes-webui/pull/3646
- https://github.com/nesquena/hermes-webui/pull/3672
- https://github.com/nesquena/hermes-webui/releases/tag/v0.51.269
- https://www.vulncheck.com/advisories/hermes-webui-profile-isolation-bypass-via-s
- https://github.com/nesquena/hermes-webui/pull/3646
FAQ
What is CVE-2026-49956?
CVE-2026-49956 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the session search endpoin...
How severe is CVE-2026-49956?
CVE-2026-49956 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-49956?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.