Skip to content
OpenAdvisories

Vendor

0x4m4

5 known vulnerabilities.

Products

HexStrike AI 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2025-35028

    HexStrike AI MCP Server Command Injection

    By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant composed command is executed directly in the context of the MCP server’s normal pri…

    0x4m4 HexStrike AI