Advisories · Technology
0x4m4 HexStrike AI.
Every CVE that names 0x4m4 HexStrike AI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
0x4m4 HexStrike AI API Files Endpoint hexstrike_server.py FileOperationsManager path traversal
- 0x4m4 HexStrike AI
- Path traversal
- CVSS 6.9 Medium
0x4m4 HexStrike AI API Tools Endpoint hexstrike_server.py subprocess.Popen os command injection
- 0x4m4 HexStrike AI
- Command injection
- CVSS 6.9 Medium
0x4m4 HexStrike AI API Command Endpoint hexstrike_server.py missing authentication
- 0x4m4 HexStrike AI
- Authentication bypass
- CVSS 6.9 Medium
0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection
- 0x4m4 HexStrike AI
- Command injection
- CVSS 9.1 CriticalCritical · CVSS 9+
HexStrike AI MCP Server Command Injection
- 0x4m4 HexStrike AI
- Command injection