CVE-2026-10221 | NousResearch hermes-agent up to 0.12.0 run_agent.py _compress_context injection

A vulnerability classified as critical has been found in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injection.

This vulnerability is traded as CVE-2026-10221. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.