hexstrike-ai

HexStrike AI MCP Agents v6.0 Plateforme d'automatisation en cybersécurité MCP propulsée par l'IA Framework MCP avancé de tests d'intrusion propulsé par l'IA, avec plus de 150 outils de sécurité et plus de 12 agents IA autonomes 📋 Nouveautés • 🏗️ Architecture • 🚀 Installation • 🛠️ Fonctionnalités •...

CVE-2025-35028

By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant composed command is executed directly in the context of the MCP server’s normal privilege; typically, this is root. There...

CVE-2025-35028 HexStrike AI MCP Server Command Injection

By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant composed command is executed directly in the context of the MCP server’s normal privilege; typically, this is root. There...

PT-2025-48397

Name of the Vulnerable Software and Affected Versions HexStrike AI MCP Server versions prior to commit 2f3a5512 Description The HexStrike AI MCP Server is susceptible to a command injection issue. By supplying a command-line argument beginning with a semicolon ; to an API endpoint created by the...