---
id: CVE-2026-6830
title: >-
  Nesquena Hermes WebUI Environment Variable Credential Leakage via Profile
  Switch
summary: >-
  nesquena hermes-webui contains an environment variable leakage vulnerability
  where profile switching does not clear environment variables from the
  previously active profile before loading the next profile. Attackers or users
  can exploit …
severity: low
cvss: 3.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-668
  - CWE-459
vendor: nesquena
product: hermes-webui
affected:
  - 'hermes-webui < PR #351'
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-04-22T13:38:36.367888Z'
published: '2026-04-21'
updated: '2026-11-08'
sourceUpdated: '2026-11-08T14:08:14.485Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-6830'
references:
  - url: >-
      https://github.com/nesquena/hermes-webui/commit/88dc8bbe26a6055161d3251b70f5cd3d3c5831b0
    label: Patch Commit
  - url: 'https://github.com/nesquena/hermes-webui/pull/351'
    label: Pull Request
  - url: 'https://github.com/nesquena/hermes-webui/releases/tag/v0.50.132'
    label: hermes-webui 0.50.132 Release Notes
  - url: 'https://github.com/nesquena/hermes-webui/releases/tag/v0.50.12'
    label: hermes-webui 0.50.12 Release Notes
  - url: >-
      https://www.vulncheck.com/advisories/nesquena-hermes-webui-environment-variable-credential-leakage-via-profile-switch
tags:
  - cve.org
epss: 0.00113
epssPercentile: 0.01411
ingestedAt: '2026-11-08T14:51:22.263Z'
---

## Overview

nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before loading the next profile. Attackers or users can exploit additive dotenv reload behavior to access provider API keys and other sensitive secrets from one profile context in another profile, breaking expected security isolation between profiles.

## Affected

- `hermes-webui < PR #351`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.