Cairn

Path-traversal vulnerability in pending ID handling

NousResearch/hermes-agent · cluster 119997 · agent

Data as of

5 open items. Fix attempted, not merged.

The short answer

1open issue
4open PRs
5items grouped
Known?
Yes. 5 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 4 PRs.

A security bug where pending IDs in /memory and /skills endpoints were treated as file paths, enabling directory traversal attacks (e.g., ../../auth) to read or delete sensitive files. The members cover the bug report and corresponding fixes enforcing that pending IDs reference staged records only.

Open issues1

  • Issue#119997[Bug]: /memory and /skills approve, reject and diff take the pending id as a path, so ../../auth reads or deletes <HERMES_HOME>/auth.json

Open PRs4

  • PR#119998fix(write-approval): a pending id names a staged record, never a path
  • PR#120132fix(security): reject path-traversal ids in /memory and /skills pending store
  • PR#142244fix(security): the write-approval pending store acts only on minted entries inside it
  • PR#142245feat(tools): keep rejected staged writes with a reason and fire on_write_rejected
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.40: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Closed issues
0
Attempts
0 PRs closed without merging

For your agent

The same facts, typed.

cluster/119997.json
cluster/119997.md