CVE-2026-14625 | NousResearch hermes-agent up to 0.15.2 tui_gateway/server.py shell.exec protection mechanism

A vulnerability, which was classified as critical, was found in NousResearch hermes-agent up to 0.15.2. The affected element is the function shell.exec of the file tui_gateway/server.py. The manipulation results in protection mechanism failure.

This vulnerability is known as CVE-2026-14625. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.