CyberRota Analysis
AI-GeneratedA server-side request forgery vulnerability exists in the Link Title Fetch component of NousResearch hermes-agent version 0.18.0, specifically within the fetchLinkTitle function. This flaw allows remote attackers to manipulate the URL argument, potentially leading to unauthorized access to internal resources. Organizations using this version of the software should prioritize remediation to mitigate the risk of exploitation.
Original NVD Description
A vulnerability has been found in NousResearch hermes-agent 0.18.0. This affects the function fetchLinkTitle of the file apps/desktop/src/app/artifacts/index.tsx of the component Link Title Fetch. Such manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.