What’s Vulnerable › Products

0x4m4 HexStrike AI vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your 0x4m4 HexStrike AI version is affected

Latest 0x4m4 HexStrike AI vulnerabilities

• CVE-2026-90691 — 0x4m4 HexStrike AI API Files Endpoint hexstrike_server.py FileOperationsManager path traversal (CVSS 8.3)
• CVE-2026-90690 — 0x4m4 HexStrike AI API Tools Endpoint hexstrike_server.py subprocess.Popen os command injection (CVSS 7.3)
• CVE-2026-90620 — 0x4m4 HexStrike AI API Command Endpoint hexstrike_server.py missing authentication (CVSS 7.3)
• CVE-2026-90619 — 0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection (CVSS 7.3)
• CVE-2025-35028 — HexStrike AI MCP Server Command Injection (CVSS 9.1)