CVE-2026-58123
Hermes WebUI < 0.51.788 Unauthenticated RCE via Terminal API
CVSS Score
9.8
EPSS Score
0.9%
EPSS Percentile
56th
Hermes WebUI before 0.51.788 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by accessing the embedded terminal API endpoints without credentials. Attackers can create a session, attach a PTY shell, and write arbitrary commands through the terminal input endpoint to achieve full command execution as the server process user via four sequential unauthenticated HTTP requests.
| CWE | CWE-306 |
| Vendor | nesquena |
| Product | hermes-webui |
| Published | Jul 9, 2026 |
| Last Updated | Jul 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for nesquena hermes-webui
Be the first to know when new critical vulnerabilities affecting nesquena hermes-webui are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
nesquena / hermes-webui
0 < 0.51.788
References
github.com: https://github.com/nesquena/hermes-webui/releases/tag/v0.51.788 github.com: https://github.com/nesquena/hermes-webui/pull/5268 github.com: https://github.com/nesquena/hermes-webui/commit/d257e5f36cfa9328600c8bde6f0de09a6ad9b6f4 vulncheck.com: https://www.vulncheck.com/advisories/hermes-webui-unauthenticated-rce-via-terminal-api
Credits
Katriel Moses VulnCheck