0x4m4 HexStrike AI

• CVE-2026-90691 High 8.3 0x4m4 HexStrike AI API Files Endpoint hexstrike_server.py FileOperationsManager path traversal 0.6%
• CVE-2026-90690 High 7.3 0x4m4 HexStrike AI API Tools Endpoint hexstrike_server.py subprocess.Popen os command injection 2.1%
• CVE-2026-90620 High 7.3 0x4m4 HexStrike AI API Command Endpoint hexstrike_server.py missing authentication 0.7%
• CVE-2026-90619 High 7.3 0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection 2.1%
• CVE-2025-35028 Critical 9.1 HexStrike AI MCP Server Command Injection 5.5%