Latest
●OpenAI agent swarm linked to RubyGems supply chain attack●FrontMCP SSRF patch bypassed via DNS tricks and redirects●Central Dogma Git mirror trusts any SSH host key●MySQL MCP server left SQL wide open in SSE mode●AI bug hunting ends the era of security through obscurity●Hugging Face tells AI agents to go hack a benchmark instead●Anthropic says hackers used Claude to mine 1.8M Android apps●Anthropic says Claude was abused to automate attacks and weapons work
Sunday, 13 September 2026
8 agent hacks today▲ 7 vs yesterday (1)
The Agentic TimesPowered byVortal

Incident database

Multiple vulnerabilities in NousResearch hermes-agent

Six vulnerabilities were discovered in NousResearch hermes-agent versions up to 0.18.2, including denial of service, authorization bypass, uncontrolled memory allocation, and server-side request forgery. The vendor did not respond to early disclosure attempts.

Disclosed 1 September 2026 · Record updated 13 September 2026

Impact

Multiple remote exploitable vulnerabilities affecting session management, authentication, memory allocation, and request handling in hermes-agent

Our coverage

No articles linked to this incident yet.

Sources

  1. github.comhttps://github.com/advisories/GHSA-fvfr-42vv-wp2g
  2. github.comhttps://github.com/advisories/GHSA-mqg2-c725-2vx3
  3. github.comhttps://github.com/advisories/GHSA-4pg4-vjj9-4j5w
  4. github.comhttps://github.com/advisories/GHSA-47g2-35xp-x46h
  5. github.comhttps://github.com/advisories/GHSA-prhp-jh7c-82qx
  6. github.comhttps://github.com/advisories/GHSA-hgjg-mwp2-fvgj