HexStrike AI (Up to Commit D689933ff579d839c676c82b231f8e98326c5f04) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/hexstrike-ai-up-to-commit-d689933ff579d839c676c82b231f8e98326c5f04/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 14 Sep 2026 03:29:56 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgRemote Command Injection in 0x4m4 HexStrike AIhttps://feed.craftedsignal.io/briefs/2026-09-hexstrike-rce/Mon, 14 Sep 2026 03:29:56 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-hexstrike-rce/A command injection vulnerability in HexStrike AI allows remote unauthenticated attackers to execute arbitrary OS commands via the Execute Endpoint.HexStrike AI, an open-source project by 0x4m4, contains a remote code execution vulnerability (CVE-2026-90619) affecting all releases up to commit d689933ff579d839c676c82b231f8e98326c5f04. The flaw resides within the 'Execute Endpoint' component inside the 'hexstrike_server.py' file. An attacker can trigger this vulnerability by sending a maliciously crafted request to the application, specifically targeting the 'code' or 'script' arguments. Because the input is processed without adequate sanitization, the application passes the user-supplied data directly to the underlying operating system's shell, resulting in arbitrary command execution. This vulnerability is remotely exploitable without authentication, and public proof-of-concept exploits exist, posing a high risk to organizations utilizing this component in production environments. As the project follows a continuous delivery model without versioned releases, users must monitor the project repository for updates.

Impact

The vulnerability allows full remote code execution on the server hosting the HexStrike AI component. Successful exploitation leads to total system compromise, including potential data exfiltration, deployment of malicious payloads, or use of the server as a pivot point within the network. Because the vulnerability is remotely reachable and requires no authentication, it is highly attractive for opportunistic exploitation across any publicly exposed instances.

Recommendation

  1. Identify all instances of the HexStrike AI project within the environment and restrict network access to the 'Execute Endpoint' component until a patch is available.
  2. Implement an application firewall or proxy-level filter to inspect incoming HTTP requests for suspicious shell metacharacters in the 'code' or 'script' query parameters.
  3. Monitor webserver logs for requests directed at the Execute Endpoint containing patterns indicative of command injection (e.g., semicolons, pipe operators, or backticks).
  4. Monitor process creation events on servers running HexStrike AI for unusual child processes (e.g., cmd.exe, /bin/sh, nc) spawned by the server process.
]]>highadvisoryremote-code-executionvulnerabilitycommand-injectionapi-security