NousResearch/hermes-agent

Fix update/restart to use running install path

Cluster 111569. Data as of

Nothing open on GitHub. Fix merged in #112215 on 16 Sep 2026. Check it covers your case.

The short answer

0open issues
0open PRs
3items grouped
Known?
Yes. 3 related items grouped here, 1 issue already closed.
Fix event
A fix was merged to main in PR #112215. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this resolved, deciding PR #112215. That is separate from the fix event.
Still open
Nothing open on GitHub.

These items address a concern that the gateway's update and restart commands resolve the executable via PATH (shutil.which) rather than the currently running installation, with a proposed fix to derive the path from the running process instead.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #112215 fix(gateway): /update and restart relaunch the running install instead of whatever 'hermes' is on PATH (#111569, salvage #111574)

    merged to main

    files: cron/scheduler_delivery.py, gateway/run.py, hermes_cli/kanban_db_dispatch.py, tests/cron/test_bot_chat_cli_home.py, tests/cron/test_bot_chat_pending.py, tests/cron/test_bot_chat_pending_identity.py, tests/cron/test_cron_bot_chat_delivery.py, tests/gateway/test_update_command.py, tests/hermes_cli/test_kanban_db.py

1 PR closed without merging

From the close comments: merged via another change 1

  • #111574 fix(gateway): resolve the update/restart argv from the running install, not PATH · merged via another change → 173ccfe, #112215
Closed issues · 1
  • Closed#111569[Security] Windows /update command resolves hermes via shutil.which → PATH hijack
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Merged PRs
#112215
Closed issues
1
Attempts
1 PR closed without merging
Fix link checked
16 Sep 2026

For your agent

The same facts, typed.