CVE-2026-7396
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Apr 29, 2026
Vendor
unknown
Description
A vulnerability was identified in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/wecom.py of the component WeChat Work Platform Adapter. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.