{"id":"CVE-2026-49957","title":"Hermes WebUI < 0.51.296 Workspace Boundary Bypass via api/workspace.py","summary":"Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the SSH/remote terminal profile workspace…","severity":"high","cvss":7.7,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-22"],"vendor":"nesquena","product":"hermes-webui","affected":["hermes-webui < 0.51.296"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-06-09T20:21:59.197539Z"},"published":"2026-06-09","updated":"2026-11-08","sourceUpdated":"2026-11-08T14:04:58.843Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-49957","references":[{"url":"https://github.com/nesquena/hermes-webui/releases/tag/v0.51.296","label":"hermes-webui 0.51.296 Release Notes"},{"url":"https://github.com/nesquena/hermes-webui/pull/3731"},{"url":"https://github.com/nesquena/hermes-webui/pull/3744"},{"url":"https://github.com/nesquena/hermes-webui/commit/91a89fb5d5c0bf87932917f9914ad0150ea62fe4"},{"url":"https://www.vulncheck.com/advisories/hermes-webui-workspace-boundary-bypass-via-api-workspace-py"}],"tags":["cve.org"],"epss":0.00421,"epssPercentile":0.3667,"ingestedAt":"2026-11-08T14:51:22.382Z","slug":"CVE-2026-49957","body":"## Overview\n\nHermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the SSH/remote terminal profile workspace resolution logic within _remote_terminal_workspace_candidate(). Attackers can configure a remote terminal working directory to a system directory such as /etc, causing the workspace resolution path to accept it as a trusted local workspace root before the _is_blocked_workspace_path() guard executes, enabling read access to local system files through workspace file-read helpers.\n\n## Affected\n\n- `hermes-webui < 0.51.296`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":42.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}