CVE-2026-6832

HIGH EPSS 37.5%
Published Apr 21, 20262mo ago · Modified Jun 17, 20261w ago
7.2 CVSS 4.0
High
Find Similar
Published Apr 21, 2026 2mo ago
Last Modified Jun 17, 2026 1w ago

Description

Hermes WebUI contains an arbitrary file deletion vulnerability in the /api/session/delete endpoint that allows authenticated attackers to delete files outside the session directory by supplying an absolute path or path traversal payload in the session_id parameter. Attackers can exploit unvalidated session identifiers to construct paths that bypass the SESSION_DIR boundary and delete writable JSON files on the host system.

CVSS Details

Base Score
7.2
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
37.5% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-22 Path Traversal Resource Mgmt

Affected Products 1

VendorProductVersionRange
get-hermeshermes_web_ui* <0.50.32

References 6

  • github.com https://github.com/nesquena/hermes-webui/commit/3cc5839bf303fa6758bfdac538507407a2929655
    Patch
  • github.com https://github.com/nesquena/hermes-webui/pull/409
    ExploitIssue TrackingPatchVendor Advisory
  • github.com https://github.com/nesquena/hermes-webui/pull/412
    Issue TrackingPatch
  • github.com https://github.com/nesquena/hermes-webui/releases/tag/v0.50.132
    ProductRelease Notes
  • github.com https://github.com/nesquena/hermes-webui/releases/tag/v0.50.32
    ProductRelease Notes
  • vulncheck.com https://www.vulncheck.com/advisories/nesquena-hermes-webui-arbitrary-file-deletion-via-unvalidated-session-id
    Third Party Advisory

Remediation

  • github.com https://github.com/nesquena/hermes-webui/commit/3cc5839bf303fa6758bfdac538507407a2929655
    Patch
  • github.com https://github.com/nesquena/hermes-webui/pull/409
    ExploitIssue TrackingPatchVendor Advisory
  • github.com https://github.com/nesquena/hermes-webui/pull/412
    Issue TrackingPatch