#credential-leak
2 articles
Beware: Hermes Agent Security Audit Uncovers Credential Bypass, Sandbox Escape, and Session Hijacking in 5 HIGH-Severity Findings
A coordinated security audit of NousResearch/hermes-agent (EPIC #82591) revealed 5 HIGH-severity vulnerabilities including credent…
Beware: Claude for Chrome Extension OAuth Grant Survives Global Logout — You Cannot Kill It
A Claude for Chrome extension OAuth grant persists after 'Log out of all devices,' password changes, and every visible token revoc…