2026-07-01-hermes-agent-command-approval-bypass-closed-gnu-long-flag-prefix-abbr

Command-approval bypass closed: GNU long-flag prefix abbreviations of chown --recursive and git push --force skipped the approval gate (channel: main-unreleased, 2026-07-01). Operator consequence: Approval/permission behavior change. DANGEROUS_PATTERNS used exact-match strings, so GNU prefix abbreviations (chown --recurs, git push --forc) ran WITHOUT triggering approval. Two patterns switched to prefix matching (--recur[a-z], --forc[a-z]). Anyone relying on Hermes's command-approval sandbox as a governance control was under-protected against destructive recursive/force commands; re-audit approval config and upgrade once tagged (merge SHA 0f66995). Full receipted detail lives in harvest/watchlist.md.

Receipt

https://github.com/NousResearch/hermes-agent/pull/55959

Finding metadata

Confidence: high

Run: 2026-07-01-weekly-digest-2026-06-24_2026-07-01-frontier-v0

Finding ID: 2026-07-01-hermes-agent-command-approval-bypass-closed-gnu-long-flag-prefix-abbr

Accepted signals

Hermes landed a full security wave on main -- path-escape, command-approval-bypass, secret redaction -- and tagged none of it (still v2026.6.19) / 2026-07-01

Source links

Primary links, including exact changelog lines when available.

Hermes Agent
merged pr2026-07-01-hermes-agent-command-approval-bypass-closed-gnu-long-flag-prefix-abbrgithub.com/NousResearch/hermes-agent/pull/55959

Versioned source: run artifact