0x4m4 vulnerability disclosures
Explore 5 current published CVE records under this source identity, canonical score coverage, provider assessments and recent disclosures. Verify affected versions in the original source.
Current source coverage
- Published CVE records
- 5
- Canonical CVSS recorded
- 5
- No canonical CVSS score
- 0
- Listed in the retained CISA KEV catalog
- 0
- EPSS recorded
- 5
- NVD status recorded
- 5
Recent source disclosures
- CVE-2026-90691 — 0x4m4 HexStrike AI API Files Endpoint hexstrike_server.py FileOperationsManager path traversal
- CVE-2026-90690 — 0x4m4 HexStrike AI API Tools Endpoint hexstrike_server.py subprocess.Popen os command injection
- CVE-2026-90620 — 0x4m4 HexStrike AI API Command Endpoint hexstrike_server.py missing authentication
- CVE-2026-90619 — 0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection
- CVE-2025-35028 — HexStrike AI MCP Server Command Injection
Source products
- HexStrike AI — 5 CVEs
Source revision: a57c5fef8999dd727850df0964bbdbc83b9ab7b3
Counts describe distinct currently published, source-present CVE records, grouping only case variations of publisher-supplied names; they do not establish organizational exposure.
Canonical labels retain an actual source spelling. Synonyms and aliases are not merged; versions and vendor attribution require source review.
Provider coverage describes currently retained assessments; it does not reconstruct historical risk. Check source freshness separately.