1.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-9369

CVE-2026-9369: hermes-agent has an Incorrect Comparison

A security flaw has been discovered in NousResearch hermes-agent 2026.4.23. Affected is the function _discover_dashboard_plugins of the file hermes_cli/web_server.py of the component CLI web-dashboard Interface. Performing a manipulation of the argument HERMES_ENABLE_PROJECT_PLUGINS results in incorrect comparison. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-9369

CVE-2026-9369:

1.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation pocAutomatable NoTech Impact Partial

Select your environment

→SSVCDeferfix on upgrade

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
hermes-agent	pip	< 0.15.0	0.15.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the _discover_dashboard_plugins function within the hermes_cli/web_server.py file of the hermes-agent package. The root cause is an incorrect comparison when checking the value of the HERMES_ENABLE_PROJECT_PLUGINS environment variable. The original code, if os.environ.get("HERMES_ENABLE_PROJECT_PLUGINS"):, treats any non-empty string as a truthy value. This means that if a user sets HERMES_ENABLE_PROJECT_PLUGINS to "0", "false", or "no" in an attempt to disable project plugins, the code would still enable them. This flaw could allow an attacker with local access to bypass the intended security control and load potentially malicious plugins. The provided patch 09f85f2cf79362a2f7963754b49a44cb3d234176 rectifies this by replacing the simple truthiness check with a call to env_var_enabled, a utility function that correctly interprets boolean-like strings from environment variables.

Vulnerable functions

_discover_dashboard_plugins

hermes_cli/web_server.py

The function `_discover_dashboard_plugins` in `hermes_cli/web_server.py` is vulnerable to an incorrect comparison. It uses `os.environ.get("HERMES_ENABLE_PROJECT_PLUGINS")` to check if project plugins should be enabled. This check is flawed because it evaluates to true for any non-empty string, including values like '0', 'false', or 'no' which are intended to disable the feature. An attacker with local access could set this environment variable to a seemingly 'false' value and still have project plugins enabled, potentially leading to the execution of untrusted code.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.