0x4m4

Products

ProductCVEsExploitedLatest
HexStrike AI5–Sep 14, 2026

Exploited and recent CVEs

  • CVE-2026-90691 High 8.3 0x4m4 HexStrike AI API Files Endpoint hexstrike_server.py FileOperationsManager path traversal 0.6%
  • CVE-2026-90690 High 7.3 0x4m4 HexStrike AI API Tools Endpoint hexstrike_server.py subprocess.Popen os command injection 2.1%
  • CVE-2026-90620 High 7.3 0x4m4 HexStrike AI API Command Endpoint hexstrike_server.py missing authentication 0.7%
  • CVE-2026-90619 High 7.3 0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection 2.1%
  • CVE-2025-35028 Critical 9.1 HexStrike AI MCP Server Command Injection 5.5%