Finding / hermes-agent
2026-10-13-hermes-agent-diagnostic-dumps-redact-credentials-embedded-in-base-urls
Diagnostic dumps redact credentials embedded in base URLs. Fallback-provider base URLs could preserve userinfo, query or fragment tokens in hermes dump and uploaded debug bundles despite force redaction. The fix requests strict URL-credential redaction in dump/upload paths and preserves canonical hyphenated sensitive parameter names. security.redact_secrets=True was a default, not complete path coverage.
Channel: tagged-release (first stable v0.21.6). Half: defect. Date: 2026-09-29.
Operator consequence: Inspect bundles already shared for URL credentials and revoke exposed tokens. Upgrade to v0.21.6+ before producing another diagnostic bundle; avoid assuming the ordinary log redaction policy strips every URL token.
Receipt
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-hermes-agent-diagnostic-dumps-redact-credentials-embedded-in-base-urls
Profile citations
- Hermes Agent / claim / diagnostic-url-redaction
- Hermes Agent / posture / governance
Source links
Primary links, including exact changelog lines when available.