Cairn
NousResearch/hermes-agent

SimpleX allowlist bypass via display name collision

Cluster 44729 · gateway. Data as of

2 open items. Fix merged in #125034 on 27 Sep 2026. Check it covers your case.

The short answer

1open issue
1open PR
4items grouped
Known?
Yes. 4 related items grouped here, 1 issue already closed.
Fix event
A fix was merged to main in PR #125034. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this partially resolved, deciding PR #125034. That is separate from the fix event.
Still open
1 issue and 1 PR.

A security vulnerability where the SimpleX gateway allowlist authorization can be bypassed by using a colliding contact display name. Members include the vulnerability reports and a related fix removing mutable display-name from the allowlist check.

Open issues1

  • Issue#44730[Security] Hermes SimpleX gateway allowlist authorization bypass via colliding contact display name

Open PRs1

  • PR#44741fix(security): remove mutable display-name from SimpleX allowlist check

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #125034 fix(simplex): authorize by contactId only, not the sender's display name

    merged to main

    files: gateway/authz_mixin.py, plugins/platforms/simplex/adapter.py, tests/gateway/test_simplex_plugin.py, tests/gateway/test_unauthorized_dm_behavior.py, website/docs/user-guide/messaging/simplex.md

Closed issues · 1
  • Closed#44729[Security] Hermes SimpleX sender allowlist can be bypassed via colliding display name on upstream main
How this cluster was grouped
  • Link evidence (partly structural links): some members are connected by structural evidence (shared changed files, or a closing/superseded reference); the rest are joined by an automated relevance judgement over their text.
  • Members outside that structural core may belong to a different underlying problem.
  • Pairwise link density 0.39: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
gateway
Merged PRs
#125034
Closed issues
1
Attempts
0 PRs closed without merging
Fix link checked
27 Sep 2026

For your agent

The same facts, typed.

cluster/44729.json
cluster/44729.md