{"repo":"NousResearch/hermes-agent","public_id":"111564","display_label":"Group chat impersonation and control frame security fixes","summary":"These items concern security vulnerabilities in group chat where malicious agent output or member control frames could impersonate user messages or manipulate session behavior. The work involves patches to the gateway and desktop components to neutralize these attack vectors.","subsystem":null,"counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":112260,"merged_at":"2026-09-16T02:04:59+00:00"},"resolution":{"state":"resolved","by":"pr-112260"},"freshness":{"state":"verified","last_verified_at":"2026-09-16T02:04:59+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":111564,"pr_number":112260,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-16T02:04:59+00:00"}],"members":[{"kind":"issue","number":111564,"title":"Group chat: agent output containing the literal [OUT-OF-BAND USER MESSAGE] marker is treated as a genuine user message by every participant","url":null,"state":"closed"},{"kind":"pr","number":111571,"title":"fix(gateway): neutralize member control frames","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"837acdc91d","number":0},{"kind":"pr","value":"#112260","number":112260}],"category":"merged_via","implication":"superseded"},"merged":false},{"kind":"pr","number":112260,"title":"fix(gateway,desktop): group-chat members can no longer impersonate the user's out-of-band messages (#111564, salvage #111571, #111576)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["agent/prompt_builder.py","apps/desktop/src/plugins/hermes-bots/group-chat.test.ts","apps/desktop/src/plugins/hermes-bots/group-round-prompt.ts","gateway/hosted_room_discussion.py","tests/gateway/test_hosted_room_discussion.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}