← Database

CVE-2026-67918

HIGH CVSS: 7.5 Published: 2026-08-17 Modified: 2026-08-18

Description

Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint

Affected Platforms

Unknown

Weakness Type

CWE-22

References