Hermes Agent - PKCE Session Takeover via Redirect-URI Parser Confusion

T1Covered by 1 source · first reported by Tenable Research at 09 Oct, 15:15 UTC

Hermes Agent - PKCE Session Takeover via Redirect-URI Parser Confusion Note: Another researcher identified the same vulnerability during the disclosure process with the Nous Researcher team. In Hermes Agent, the public GET /auth/native/authorize flow validates the redirect_uri with Python's…

devsciencesecurity

Sources

• T1Hermes Agent - PKCE Session Takeover via Redirect-URI Parser ConfusionTenable Research09 Oct, 15:15