All 3 CVE vulnerabilities found in HexStrike AI, with AI-generated Chinese analysis, references, and POCs.
Vendor: 0x4m4
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-90620 | 0x4m4 HexStrike AI API Command Endpoint hexstrike_server.py missing authentication CWE-306 | 7.3 | High | 2026-09-14 |
| CVE-2026-90619 | 0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection CWE-78 | 7.3 | High | 2026-09-14 |
| CVE-2025-35028 | HexStrike AI MCP Server Command Injection CWE-78 | 9.1 | Critical | 2025-11-30 |
All 3 known CVE vulnerabilities affecting HexStrike AI with full Chinese analysis, references, and POCs where available.