Finding / hermes-agent
2026-09-21-hermes-agent-multiplex-profiles-leaked-allow-all-allowlists-vault-secrets-and-files-across-profiles-unt
Multiplex profiles leaked allow-all, allowlists, vault secrets, and files across profiles until v2026.9.11. Multiplex profiles leaked allow-all, allowlists, vault secrets, and files across profiles until v2026.9.11
Channel: tagged-release. Half: defect. Date: merged 2026-09-11; tagged 2026-09-11.
Operator consequence: If you serve several profiles from one gateway, upgrade to v2026.9.11 or later and review who talked to secondary bots before then. Single-profile installs were not affected.
Receipt
Finding metadata
Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0
Finding ID: 2026-09-21-hermes-agent-multiplex-profiles-leaked-allow-all-allowlists-vault-secrets-and-files-across-profiles-unt
Profile citations
- Hermes Agent / claim / multiplex-profile-leak
Source links
Primary links, including exact changelog lines when available.