{"affected":[{"defaultStatus":"affected","ecosystem":"github","packageName":"NousResearch/hermes-agent","product":"hermes-agent","source":"CNA: VulnCheck","vendor":"NousResearch","versions":[{"lessThanOrEqual":"0.21.0","status":"affected","version":"0.18.2","versionType":"semver"},{"status":"unaffected","version":"f6234d00c5d59450adea1d7edd30ad3859375c79","versionType":"git"}]}],"cveId":"CVE-2026-71963","cwes":["CWE-78"],"description":"Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to execute arbitrary OS commands by supplying a malicious repository with a crafted .git/config that sets core.fsmonitor to an attacker-controlled command. When a user opens the malicious repository and sends any message, the agent triggers a git status index refresh which executes the injected command in the user's process context, exposing the full environment including configured provider API keys.","epss":{"date":"2026-11-08","percentile":0.58685,"score":0.00858},"exploits":[{"kind":"exploit","source":"CNA: VulnCheck","url":"https://www.manifold.security/blog/ai-coding-agents-git-hijack"}],"kev":null,"metrics":[{"score":8.6,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":8.8,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794146914950,"publishedAt":1788448770310,"references":[{"source":"CNA: VulnCheck","tags":["technical-description","exploit"],"url":"https://www.manifold.security/blog/ai-coding-agents-git-hijack"},{"source":"CNA: VulnCheck","tags":["issue-tracking","patch"],"url":"https://github.com/NousResearch/hermes-agent/pull/101483"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/NousResearch/hermes-agent/commit/f6234d00c5d59450adea1d7edd30ad3859375c79"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/hermes-agent-rce-via-git-core-fsmonitor-config-injection"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/NousResearch/hermes-agent/pull/101483"},{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/NousResearch/hermes-agent/commit/f6234d00c5d59450adea1d7edd30ad3859375c79"}],"revision":"7fdc9e65fe95ea01a4b5e8dbc51be3c37df12a3c5a499df0ba9d528bc6e8ed93","sources":[{"modifiedAt":1794146914950,"name":"CNA: VulnCheck","retrievedAt":1794151326445,"url":"https://www.cve.org/CVERecord?id=CVE-2026-71963"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794151337915,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-71963"}],"ssvc":{"assessedAt":1788450066481,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection","updatedAt":1794151337915}