Cairn
NousResearch/hermes-agent

Child env credential scrub bypass fixes

Cluster 125189 · agent. Data as of

1 open item. Fix merged in #125755 on 28 Sep 2026. Check it covers your case.

The short answer

1open issue
0open PRs
3items grouped
Known?
Yes. 3 related items grouped here, 0 issues already closed.
Fix event
A fix was merged to main in PR #125755. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 0 PRs.

These issues and fixes address a bug where spawn sites that spread os.environ into child process environments inadvertently undo credential scrubbing, exposing adapter secrets and internal secrets to agent children.

Open issues1

  • Issue#125189[Bug]: Spawn sites that spread os.environ into a child env undo the credential scrub (compute host, LSP, raft, buzz)

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #125755 fix(child-env): keep declared adapter secrets and Hermes' own secrets out of agent children (salvage #122751, #125191)

    merged to main

    files: agent/lsp/client.py, agent/lsp/install.py, gateway/platform_registry.py, hermes_cli/config.py, hermes_cli/profile_channels.py, plugins/memory/openviking/__init__.py, plugins/platforms/a2a/plugin.yaml, plugins/platforms/buzz/adapter.py, plugins/platforms/photon/plugin.yaml, plugins/platforms/raft/adapter.py, plugins/platforms/teams/plugin.yaml, plugins/platforms/telegram/adapter.py, plugins/platforms/telegram/plugin.yaml, tests/agent/test_subprocess_env_guard.py, tests/tools/test_hermes_subprocess_env.py, tests/tools/test_local_env_blocklist.py, tests/tools/test_modal_snapshot_isolation.py, tests/tools/test_spawn_site_child_env.py, tools/bot_desktop/runtime.py, tools/env_passthrough.py (+9 more)

1 PR closed without merging

From the close comments: superseded by another PR 1

  • #125191 fix(child-env): spawn sites that spread os.environ no longer undo the credential scrub · superseded by another PR → #125755
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Merged PRs
#125755
Closed issues
0
Attempts
1 PR closed without merging
Fix link checked
28 Sep 2026

For your agent

The same facts, typed.

cluster/125189.json
cluster/125189.md