Tools AI Risk Radar ai-incident-0183
Incident record
Hermes Agent fixes disk exhaustion through login requests
- Severity
- Medium
- Status
- Patched
- Type
- Infra Vuln
- Target
- Hermes Agent before 0.21.6
- Actor
- researcher
What happened
The public password-login handler logged an unrestricted provider string before rejecting the request. Repeated requests could fill the disk and disrupt the service.
Tenable advisory TRA-2026-64 rates the flaw Medium. Version 0.21.6 fixes it. The vulnerable logging path runs before authentication.
Sources
- Primary disclosurewww.tenable.com/security/research/tra-2026-64
- Supporting primary sourcegithub.com/NousResearch/hermes-agent/releases/tag/v0.21.6
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026