HexStrike AI vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

HA

Product

HexStrike AI

by 0x4m4 · last CVE Sep 14, 2026

5

CVEs

0

On KEV

9.1

Max CVSS

0

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 1High 4Medium 0Low 0

Severity

All severities5 Critical1 High4 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add HexStrike AI to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-35028	9.1	5%	Nov 30	HexStrike AI MCP Server Command Injection Affected: 33267047667b9accfbf0fdac1c1c7ff12f3a5512
CVE-2026-90691	8.3	1%	Sep 14	0x4m4 HexStrike AI API Files Endpoint hexstrike_server.py FileOperationsManager path traversal Affected: d689933ff579d839c676c82b231f8e98326c5f04
CVE-2026-90690	7.3	2%	Sep 14	0x4m4 HexStrike AI API Tools Endpoint hexstrike_server.py subprocess.Popen os command injection Affected: d689933ff579d839c676c82b231f8e98326c5f04
CVE-2026-90620	7.3	1%	Sep 14	0x4m4 HexStrike AI API Command Endpoint hexstrike_server.py missing authentication Affected: d689933ff579d839c676c82b231f8e98326c5f04
CVE-2026-90619	7.3	2%	Sep 14	0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection Affected: d689933ff579d839c676c82b231f8e98326c5f04