What happened
Hermes WebUI versions before 0.51.788 expose embedded terminal API endpoints without any authentication check, allowing a remote unauthenticated attacker to reach privileged terminal functionality and execute arbitrary shell commands as the server process user.
Why it matters
Combined with the related auth-bypass CVE-2026-58122 disclosed the same week, this gives an unauthenticated remote attacker full shell access on any exposed Hermes WebUI instance — a self-hosted AI assistant platform — representing complete host compromise with no prerequisites.
Attack vector
Unauthenticated HTTP request directly to embedded terminal API endpoint executes arbitrary shell commands
Affected systems
Hermes WebUI < 0.51.788
Mitigation
Upgrade to Hermes WebUI ≥0.51.788