CVE-2026-90691 | 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04 API Files Endpoint hexstrike_server.py FileOperationsManager filename path traversal (135/225)

September 13, 2026 Yanac

A vulnerability identified as critical has been detected in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The impacted element is the function FileOperationsManager of the file hexstrike_server.py of the component API Files Endpoint. The manipulation of the argument filename leads to path traversal.

This vulnerability is listed as CVE-2026-90691. The attack may be initiated remotely. In addition, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More