CVE-2026-10224 | NousResearch hermes-agent up to 2026.4.30 Webhook Endpoint feishu.py _handle_webhook_request resource consumption

A vulnerability, which was classified as problematic, was found in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function _handle_webhook_request of the file gateway/platforms/feishu.py of the component Webhook Endpoint. Such manipulation leads to resource consumption.

This vulnerability is uniquely identified as CVE-2026-10224. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.