CVE-2026-6830

Description

nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before loading the next profile. Attackers or users can exploit additive dotenv reload behavior to access provider API keys and other sensitive secrets from one profile context in another profile, breaking expected security isolation between profiles.

References

https://www.vulncheck.com/advisories/nesquena-hermes-webui-environment-variable-credential-leakage-via-profile-switch

https://github.com/nesquena/hermes-webui/releases/tag/v0.50.132

https://github.com/nesquena/hermes-webui/releases/tag/v0.50.12

https://github.com/nesquena/hermes-webui/pull/351

https://github.com/nesquena/hermes-webui/commit/88dc8bbe26a6055161d3251b70f5cd3d3c5831b0

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4