CVE-2026-71963 | NousResearch Hermes Agent up to 0.21.0 Git Status Index Refresh .git/config core.fsmonitor os command injection

A vulnerability has been found in NousResearch Hermes Agent up to 0.21.0 and classified as critical. This issue affects some unknown processing of the file .git/config of the component Git Status Index Refresh. Performing a manipulation of the argument core.fsmonitor results in os command injection.

This vulnerability is reported as CVE-2026-71963. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to install a patch to address this issue.VulDB Recent EntriesRead More