A vulnerability, which was classified as critical, has been found in NousResearch hermes-agent up to 2026.4.30. This affects the function
_scan_memory_content of the file tools/memory_tool.py. This manipulation causes injection.
This vulnerability is handled as CVE-2026-10223. The attack can be initiated remotely. Additionally, an exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way.
