A vulnerability described as problematic has been identified in NousResearch hermes-agent up to 2026.4.23. This issue affects the function
_make_run_env of the file tools/environments/local.py of the component Messaging Gateway Handler. Executing a manipulation can lead to information disclosure.
The identification of this vulnerability is CVE-2026-9352. The attack may be launched remotely. Furthermore, there is an exploit available.
The vendor was contacted early about this disclosure but did not respond in any way.
