Hermes Agent shipped an MCP catalogue pinned to a branch instead of a commit

What happened

Hermes Agent referenced a third-party upstream repository in its bundled MCP catalogue by mutable branch pointer rather than a pinned commit. Anyone who compromised that upstream could push code to every host that had installed the catalogue entry, with no action needed from the operator.

Classified CWE-494, download of code without integrity check. CVSS 3.1 scores it 8.3 high and CVSS 4.0 scores it 9.0 critical. A branch reference is a promise that whoever controls the branch controls your machine later, which is the same supply-chain shape as the npm worm already on this board, arriving through an agent tool catalogue instead.