NousResearch hermes-agent is vulnerable to remote code execution through a supply chain flaw in its bundled MCP catalog, posing a critical risk to host integrity.

This is a supply chain vulnerability categorized as CWE-494, where the software downloads and executes code without verifying its integrity through pinned commit SHAs. An unauthenticated remote attacker can compromise an upstream repository and trigger arbitrary code execution on any host that installs the affected catalog entry.

The ability for a remote attacker to achieve arbitrary code execution via a supply chain compromise represents a severe threat to organizational infrastructure. Successful exploitation could lead to full system takeover, unauthorized data access, and the potential for lateral movement across the network. With a CVSS score of 8.3, this high-severity vulnerability necessitates immediate attention to prevent compromise of critical production environments.

Immediate Action: Upgrade the hermes-agent to version 0.19.0 or 2026.7.20 immediately to resolve the insecure reference handling.

Proactive Monitoring: Audit environment logs for unauthorized outbound network connections or suspicious process execution patterns originating from the agent.

Compensating Controls: Implement strict egress filtering on agent hosts to limit communication only to trusted, verified endpoints, effectively reducing the risk of pulling malicious payloads from compromised repositories.

Public Exploit Available: No — there is no confirmed public exploit in the available data.

Given the severity of potential remote code execution, organizations must prioritize patching the hermes-agent. Relying on mutable branches for software dependencies creates a significant security gap that can be exploited by third-party actors. Apply the provided updates immediately to ensure that only cryptographically verified code is executed within your environment.