{"repo":"NousResearch/hermes-agent","public_id":"106761","display_label":"Cross-profile session data leakage via bare session ID","summary":"A bug allows bare session ID lookups to silently scan and return data from other profiles' state databases. Multiple fixes address stopping cross-profile reads and failing closed when a bare session ID resolves to a different profile.","subsystem":null,"counts":{"members":5,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":3},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":108074},"resolution":{"state":"resolved","by":"pr-108074"},"freshness":{"state":"verified","last_verified_at":"2026-09-11T13:24:12+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.4},"fix_edges":[{"issue_number":102315,"pr_number":108074,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false},{"issue_number":102526,"pr_number":108074,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true},{"issue_number":105887,"pr_number":108074,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true},{"issue_number":106761,"pr_number":108074,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true},{"issue_number":106974,"pr_number":108074,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true}],"members":[{"kind":"issue","number":106761,"title":"session_search: reading a session by bare ID silently scans every profile's state.db and returns another profile's full transcript","url":null,"state":"closed"},{"kind":"pr","number":106768,"title":"fix(session_search): do not scan other profiles for bare session_id","url":null,"state":"closed","close_reason":{"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":106772,"title":"fix(session_search): stop cross-profile reads on a bare session id miss","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#106768","number":106768},{"kind":"pr","value":"#106773","number":106773},{"kind":"pr","value":"#106761","number":106761},{"kind":"pr","value":"#106768","number":106768},{"kind":"pr","value":"#106773","number":106773}],"category":"uncategorized","implication":"needs_llm"},"merged":false},{"kind":"pr","number":106773,"title":"fix(tools): fail closed when a bare session id resolves into another profile","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#108074","number":108074},{"kind":"pr","value":"#106761","number":106761}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":108074,"title":"Sessions no longer bind to or read another profile's state.db (#102526, #106761, #105887, #106974; salvage #102534, #106975)","url":null,"state":"merged","close_reason":{"category":"merged","implication":"superseded"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["agent/turn_explainers.py","agent/turn_finalizer.py","evals/session_search_schema/runner.py","hermes_cli/profiles.py","hermes_state_registry.py","tests/hermes_cli/test_deleted_profile_tombstone.py","tests/hermes_state/test_shared_session_db_registry.py","tests/run_agent/test_corruption_recovery_guidance.py","tests/tools/test_session_search.py","tests/tui_gateway/test_launch_db_home_override_race.py","tests/tui_gateway/test_session_resume_db_ownership.py","tools/session_search_tool.py","tui_gateway/server.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}