Vulnerability Description
Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attackers with local filesystem access can read these files directly to obtain sensitive data including conversation history, tool payloads, prompts, and per-route HMAC secrets.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/NousResearch/hermes-agent/commit/3bace071bfadf2d2bec2ee048471
- https://github.com/NousResearch/hermes-agent/pull/30917
- https://github.com/NousResearch/hermes-agent/pull/31469
- https://github.com/NousResearch/hermes-agent/releases/tag/v2026.6.5
- https://www.vulncheck.com/advisories/hermes-agent-sensitive-file-permission-vuln
- https://github.com/NousResearch/hermes-agent/pull/30917
FAQ
What is CVE-2026-53870?
CVE-2026-53870 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attacke...
How severe is CVE-2026-53870?
CVE-2026-53870 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-53870?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.