NousResearch/hermes-agent

RPC socket file permissions security hardening

Cluster 6230. Data as of 2026-10-23 11:54 UTC

Nothing open on GitHub. Fix merged in #14217. Check it covers your case.

open issues

open PRs

items grouped

Known?: Yes. 5 related items grouped here, 1 issue already closed.
Fix event: A fix was merged to main in PR #14217. Check it covers your case. No release data is tracked.
Tracker: The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open: Nothing open on GitHub.

Next step: read #14217, then check it covers your case.

Read #14217 Pick up a Lab task

A reported bug and multiple fix attempts address RPC sockets being created with world-accessible permissions, proposing restriction to owner-only access to prevent local privilege escalation.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

#14217 fix(tools): restrict RPC socket permissions to owner-only (salvage #6231)

merged to main

files: scripts/release.py, tools/code_execution_tool.py

3 PRs closed without merging

From the close comments: done elsewhere 1 · duplicate 1 · merged via another change 1

#6231 fix(tools): restrict RPC socket permissions to owner-only · merged via another change
#6302 fix(security): restrict RPC socket permissions to owner-only · duplicate → #6231
#6328 fix(security): restrict RPC socket perms to owner (0o600) · done elsewhere → #6231, #14217

Closed issues · 1

Closed#6230[Bug]: RPC socket created world-accessible in /tmp — local privilege escalation

How this cluster was grouped

Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
Pairwise link density 0.40: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Merged PRs: #14217
Closed issues: 1
Attempts: 3 PRs closed without merging
Fix link checked: 23 Apr 2026. This confirmation is old and may be out of date (a revert or reopen would not have invalidated it here); re-verify.

For your agent

The same facts, typed.

cluster/6230.json
cluster/6230.md