Cairn
NousResearch/hermes-agent

Subprocess shell injection hardening and security fixes

Cluster 2743 · environments. Data as of

Nothing open on GitHub. Fix merged in #73514 on 29 Jul 2026. Check it covers your case.

The short answer

0open issues
0open PRs
3items grouped
Known?
Yes. 3 related items grouped here, 1 issue already closed.
Fix event
A fix was merged to main in PR #73514. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this resolved, deciding PR #73514. That is separate from the fix event.
Still open
Nothing open on GitHub.

These items address command injection vulnerabilities in subprocess calls, focusing on eliminating shell=True usage, scrubbing environment variables, enforcing path guards, and adding idle timeouts for TTS/STT providers.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #73514 fix(tools): command TTS/STT provider hardening — idle timeouts, env scrubbing, no-shell, path guards

    merged to main

    files: tests/tools/test_transcription_tools.py, tests/tools/test_tts_command_providers.py, tests/tools/test_tts_path_traversal.py, tests/tools/test_voice_mode_playback_env_scrub.py, tools/transcription_tools.py, tools/tts_tool.py, tools/voice_mode.py, website/docs/developer-guide/plugins/index.md, website/docs/user-guide/features/tts.md

1 PR closed without merging

From the close comments: other 1

  • #2750 fix(security): harden subprocess calls against shell injection · other → #5629
Closed issues · 1
  • Closed#2743[Bug]: Command injection risk via shell=True in subprocess calls
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
environments
Merged PRs
#73514
Closed issues
1
Attempts
1 PR closed without merging
Fix link checked
29 Jul 2026

For your agent

The same facts, typed.

cluster/2743.json
cluster/2743.md