{"type":"bundle","id":"bundle--ba893c5f-b5bb-5626-800e-2e5ce80b12c9","objects":[{"type":"campaign","spec_version":"2.1","id":"campaign--35f3cc70-52a8-5f8e-ace3-0744825b2a7d","created":"2026-09-20T19:36:34.740Z","modified":"2026-09-20T19:36:34.740Z","name":"Hermes Agent runs Git config before the first prompt (RCE)","description":"Hermes Agent runs Git config before the first prompt, enabling RCE. Upgrade to the patched release.","aliases":["CVE-2026-71963"],"first_seen":"2026-09-02T00:00:00.000Z","last_seen":"2026-09-02T12:00:00.000Z","objective":"Defensive public threat-intelligence record; see limitations and source references.","external_references":[{"source_name":"NVD CVE-2026-71963","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-71963"},{"source_name":"HOL Guard operator write-up","url":"https://hol.org/blog/cve-2026-71963-hermes-agent-git-config-rce-before-prompt"},{"source_name":"CVE Record CVE-2026-71963","url":"https://www.cve.org/CVERecord?id=CVE-2026-71963"}]}]}