hermes_webui vulnerabilities

CVEs whose affected-version data names the hermes_webui package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-11322Medium· 6.5PoC

5mo ago

Hermes WebUI before 0.51.221 Path Traversal via Symlink Workspace Bypass

Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that allows attackers to escape the workspace boundary by supplying symlinks that resolve to files or directories outside the designated workspace root. Attackers ca…

▾ Twilightnesquena · Hermes WebUIEPSS 0.32%via CVEORG