# Hermes Agent v0.13.0: durable multi-agent Kanban, session auto-resume, 8 P0 security fixes

> Kanban ships as a durable multi-agent board with heartbeats, reclaim and zombie detection, sessions auto-resume after a gateway restart, and checkpoint persistence is rewritten. A security wave closes 8 P0s and flips several defaults — redaction is on by default, WhatsApp rejects unknown senders, and Discord role allowlists become guild-scoped (closing a CVSS 8.1 cross-guild DM bypass) — so existing message flows may start being refused.

| | |
|---|---|
| **Tool** | Hermes Agent |
| **Version** | v2026.5.7 |
| **Kind** | release |
| **Published** | 2026-05-07 |
| **Observed** | 2026-08-11 |
| **Significance** | 4/5 |
| **Breaking** | yes |
| **Categories** | feature, security, capability, fix, breaking, api-change |

> **Note:** this classification is below our confidence threshold and is pending human review.

## What changed


- Multi-agent Kanban: durable board, multiple workers claiming and handing off tasks, heartbeat, reclaim, zombie detection, auto-block on incomplete exit, per-task retries, hallucination recovery gate
- `/goal` locks the agent on a target across turns (Ralph loop as a primitive)
- `video_analyze` tool for native video understanding on Gemini and compatible multimodal models
- xAI Custom Voices as a TTS provider with voice cloning
- Static gateway + CLI messages translated to 7 locales (zh, ja, de, es, fr, uk, tr); docs site gains zh-Hans
- Google Chat as 20th messaging platform, plus a platform-plugin hooks surface (IRC and Teams migrated onto it)
- Sessions auto-resume after gateway bounce, `/update` restart or source reload
- Security (8 P0): redaction ON by default; Discord role-allowlists guild-scoped (CVSS 8.1 cross-guild DM bypass); WhatsApp rejects strangers by default; TOCTOU windows closed in `auth.json` and MCP OAuth; browser cloud-metadata SSRF floor; cron prompt-injection scan of assembled skill content; `hermes debug share` redacts at upload
- Checkpoints v2: rewritten state persistence, real pruning, disk guardrails, no orphan shadow repos
- Post-write delta lint on `write_file` and `patch` for Python, JSON, YAML, TOML
- `no_agent` cron mode runs a script with no LLM; empty stdout stays silent
- `allowed_channels` / `allowed_chats` / `allowed_rooms` across Slack, Telegram, Mattermost, Matrix, DingTalk
- Providers are pluggable: `ProviderProfile` ABC + `plugins/model-providers/`
- API server: `X-Hermes-Session-Key` header gives memory providers a stable per-session id
- MCP gains SSE transport with OAuth forwarding
- 864 commits, 588 merged PRs, 282 issues closed (13 P0, 36 P1)
- Note: source text truncated mid-sentence in the MCP item


## Sources

- [github_release](https://github.com/NousResearch/hermes-agent/releases/tag/v2026.5.7) — retrieved 2026-08-11

## Community

_No curated reactions recorded. Facts and community takes are kept in separate layers
and never blended._

---
Canonical: https://changelogs.info/hermes-agent/v2026-5-7
Entity: https://changelogs.info/hermes-agent
Event ID: `evt_2026-05-07_hermes-agent_v2026-5-7`
Licence: event synthesis © changelogs.info, CC BY 4.0. Linked sources belong to their vendors.