A vulnerability described as critical has been identified in NousResearch hermes-agent 0.8.0. This affects the function
_check_sensitive_path of the file tools/file_tools.py. The manipulation results in symlink following.
This vulnerability is known as CVE-2026-7397. Attacking locally is a requirement. Furthermore, an exploit is available.
Upgrading the affected component is recommended.
