Vulnerabilities in 0x4m4

5 results

CVE-2025-35028CRITICALHexStrike AI MCP Server Command InjectionEPSS 5.3%CVE-2026-90690MEDIUM0x4m4 HexStrike AI API Tools Endpoint hexstrike_server.py subprocess.Popen os command injectionEPSS 2.1%CVE-2026-90619MEDIUM0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injectionEPSS 2.1%CVE-2026-90620MEDIUM0x4m4 HexStrike AI API Command Endpoint hexstrike_server.py missing authenticationEPSS 0.7%CVE-2026-90691MEDIUM0x4m4 HexStrike AI API Files Endpoint hexstrike_server.py FileOperationsManager path traversalEPSS 0.6%