---
id: CVE-2026-58174
title: >-
  Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session
  Profile on Import
summary: >-
  Hermes WebUI before 0.51.521 validates the workspace of an imported session
  under the active named profile but constructs the Session object without
  setting its profile in the /api/session/import handler, so the imported
  session is persi…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-732
vendor: nesquena
product: hermes-webui
affected:
  - hermes-webui < 0.51.521
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-06-30T16:47:14.661229Z'
exploitAvailable: true
published: '2026-06-30'
updated: '2026-11-08'
sourceUpdated: '2026-11-08T14:06:53.999Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-58174'
references:
  - url: 'https://github.com/nesquena/hermes-webui/releases/tag/v0.51.521'
    label: hermes-webui 0.51.521 Release Notes
  - url: 'https://github.com/nesquena/hermes-webui/pull/4489'
    label: Researcher PR
  - url: 'https://github.com/nesquena/hermes-webui/pull/4506'
    label: Maintainer PR
  - url: >-
      https://github.com/nesquena/hermes-webui/commit/3d5ef4758e920ba6888d49aaa4341de214693496
    label: Fix Commit
  - url: >-
      https://www.vulncheck.com/advisories/hermes-webui-cross-profile-authorization-bypass-via-unset-session-profile-on-import
tags:
  - cve.org
  - exploit-available
epss: 0.00451
epssPercentile: 0.39479
ingestedAt: '2026-11-08T14:51:22.303Z'
---

## Overview

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated as the default profile by the profile authorization check, a user on the default profile can export the imported session transcript and use its session identifier to read files from the named profile's workspace, defeating the application's profile isolation.

## Affected

- `hermes-webui < 0.51.521`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.