CVE-2026-15311 | NousResearch hermes-agent up to 2026.5.29.2 Matrix Adapter matrix.py MatrixAdapter._markdown_to_html cross site scripting (Issue 42667)

July 9, 2026 Yanac

A vulnerability, which was classified as problematic, was found in NousResearch hermes-agent up to 2026.5.29.2. Affected by this issue is the function MatrixAdapter._markdown_to_html of the file gateway/platforms/matrix.py of the component Matrix Adapter. Such manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2026-15311. The attack can be executed remotely. Additionally, an exploit exists.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More