NousResearch/hermes-agent
Isolated dashboard cross-profile access bug fixes
Cluster 91330 · dashboard. Data as of
2 open items. Fix attempted, not merged.
The short answer
1open issue
1open PR
3items grouped
- Known?
- Yes. 3 related items grouped here, 0 issues already closed.
- Fix event
- No fix has been merged to main. 1 PR closed without merging; see the attempts below.
- Tracker
- The maintainers' tracker marks this
unresolved. That is separate from the fix event. - Still open
- 1 issue and 1 PR.
Next step: read the attempts below. Your case may extend or revive that work.
Pick up a Lab taskThese issues address a bug where isolated dashboards could improperly access or affect other profiles, including cross-profile prompt injection and unscoped profile endpoints. The fixes scope profile interactions strictly to the isolated dashboard's own profile.
Open issues1
- Issue#91330[Bug]: Hermes Desktop allow cross profile SOUL.md editing while --isolated is passed on dashboard
Open PRs1
- PR#91345fix(profiles): stop isolated dashboards from enabling cross-profile prompt injection
1 PR closed without merging
From the close comments: superseded by another PR 1
-
#91381 fix(profiles): scope profile endpoints to an isolated dashboard's profile · superseded by another PR →
1929990,21b2095,1802911
How this cluster was grouped
-
Link evidence (
structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference. -
Pairwise link density
0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36.1.00means every pair is linked.
Pick up a Lab task
Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.
Open the LabAt a glance
- Subsystem
- dashboard
- Closed issues
- 0
- Attempts
- 1 PR closed without merging