{
  "entry": {
    "kind": "vuln",
    "slug": "cve-2026-111079",
    "name": "CVE-2026-111079",
    "vendor": "Goose with the terminal integration enabled",
    "description": "Red Hat published CVE-2026-111079 (CVSS 7.4) on 22 October 2026 for Goose: when the terminal integration is enabled, Goose captures shell command history and sends it verbatim, unredacted, to the configured LLM provider with each query, so tokens, passwords or secrets typed or exported in that terminal leave the machine and can end up in provider logs. Red Hat's record names no fixed version. CVE-2026-114463, published 21 October for Nous Research Hermes Agent, is in the webhook gateway: it builds a session chat_id as webhook:{route_name}:{delivery_id} and later re-derives the authorizing route by splitting that string, so a route whose name contains a colon is authorized as a different, higher-privileged prefix route, and an attacker holding the first route's HMAC secret gets the other route's toolsets. The fix is referenced in release v0.22.2. OpenClaw GHSA-3x84-qq85-fj65 (CVE-2026-62197, published 21 October; GitHub rates it medium, CVSS 8.5) let browser CDP discovery accept WebSocket URLs that OpenClaw policy should have blocked, so a lower-trust caller could reach blocked network destinations; it is fixed in 2026.6.6.",
    "website": "https://access.redhat.com/security/cve/CVE-2026-111079",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": null,
    "configFiles": null,
    "category": "agent",
    "updatedAt": "2026-10-22",
    "risk": {
      "score": 74,
      "band": "high",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "CVE-2026-111079",
      "aliases": [
        "ti-153",
        "GHSA-3x84-qq85-fj65"
      ],
      "title": "Three Agent Advisories: Goose Sent Raw Terminal History to the LLM Provider (CVE-2026-111079), a Colon in a Hermes Agent Webhook Route Borrowed Another Route's Tools (CVE-2026-114463), and OpenClaw CDP Discovery Reached Blocked Hosts (CVE-2026-62197)",
      "summary": "Red Hat published CVE-2026-111079 (CVSS 7.4) on 22 October 2026 for Goose: when the terminal integration is enabled, Goose captures shell command history and sends it verbatim, unredacted, to the configured LLM provider with each query, so tokens, passwords or secrets typed or exported in that terminal leave the machine and can end up in provider logs. Red Hat's record names no fixed version. CVE-2026-114463, published 21 October for Nous Research Hermes Agent, is in the webhook gateway: it builds a session chat_id as webhook:{route_name}:{delivery_id} and later re-derives the authorizing route by splitting that string, so a route whose name contains a colon is authorized as a different, higher-privileged prefix route, and an attacker holding the first route's HMAC secret gets the other route's toolsets. The fix is referenced in release v0.22.2. OpenClaw GHSA-3x84-qq85-fj65 (CVE-2026-62197, published 21 October; GitHub rates it medium, CVSS 8.5) let browser CDP discovery accept WebSocket URLs that OpenClaw policy should have blocked, so a lower-trust caller could reach blocked network destinations; it is fixed in 2026.6.6.",
      "severity": "high",
      "cvss": {
        "score": 7.4,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Authentication bypass",
        "Server-side request forgery",
        "Information disclosure"
      ],
      "componentType": "agent",
      "component": {
        "name": "Goose with the terminal integration enabled",
        "vendor": null,
        "package": null,
        "ecosystem": null,
        "catalogSlug": "agent/hermes-agent"
      },
      "affected": [
        {
          "range": "Goose with the terminal integration enabled (no fixed version named); Hermes Agent webhook gateway before v0.22.2; OpenClaw before 2026.6.6.",
          "fixed": "0.22.2"
        }
      ],
      "exploited": false,
      "exploitPublic": false,
      "publishedAt": "2026-10-22",
      "modifiedAt": "2026-10-22",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://access.redhat.com/security/cve/CVE-2026-111079"
        },
        {
          "type": "cve",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111079"
        },
        {
          "type": "advisory",
          "url": "https://github.com/advisories/GHSA-3x84-qq85-fj65"
        }
      ],
      "mitigation": "In Goose, turn the terminal integration off on machines where secrets pass through the shell, keep secrets out of command lines (read them from files or a secret manager rather than exporting or pasting them), and rotate any credential typed in a terminal while the integration was on. Upgrade Hermes Agent to v0.22.2 or later, avoid colons in webhook route names, and give each route its own HMAC secret and the narrowest toolset it needs. Upgrade OpenClaw to 2026.6.6 or later and keep browser and CDP features restricted to trusted operators.",
      "detectedByAnomity": true
    }
  }
}