Dashboard / CVE-2026-11322

CVE-2026-11322

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 63/100
Published: 2026-06-04 Modified: 2026-11-08 First seen: 2026-11-08 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: None
A: None

Description

Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that allows attackers to escape the workspace boundary by supplying symlinks that resolve to files or directories outside the designated workspace root. Attackers can exploit the workspace file and listing APIs, which resolve symlink targets without enforcing that the final path remains within the workspace, to read external host files accessible to the server process and disclose sensitive data such as SSH keys, cloud credentials, or application tokens.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
nesquena Hermes WebUI 0 < 0.51.221

References & Advisories (3)

Bug Bounty Relevance

63 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

6.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.32%
Raw Score 0.003230
Percentile 25.7%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00323
2026-11-12
0.00323
2026-11-10
0.00323
2026-11-09
0.00323
2026-11-08
0.00323

Intelligence Sources

mitre ref →

External Links