CVE-2026-55198 | nesquena hermes-webui up to 0.51.442 Session Export Endpoint api/routes.py authorization

June 17, 2026 Yanac

A vulnerability was found in nesquena hermes-webui up to 0.51.442. It has been rated as problematic. This affects an unknown part of the file api/routes.py of the component Session Export Endpoint. Performing a manipulation results in authorization bypass.

This vulnerability is cataloged as CVE-2026-55198. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More