All issues

Search results

Feature Suggestion: Optional token metering & paid API key support via neuforge-pay

Status: Open.

#229 In 0x4m4/hexstrike-ai;

· sophieamoure2026-ui opened on Aug 13, 2026

Windows/non-Linux portability bug: hardcoded /tmp paths crash the server at import

Status: Open.

#227 In 0x4m4/hexstrike-ai;

· ideabib opened on Aug 10, 2026

Arbitrary File Write Leading to Remote Code Execution via Path Traversal in /api/files/create and /api/files/modify

Status: Open.

#225 In 0x4m4/hexstrike-ai;

· ez-lbz opened on Aug 4, 2026

Remote Code Execution via Command Injection in 90+ Tool Endpoints (/api/tools/*)

Status: Open.

#224 In 0x4m4/hexstrike-ai;

· ez-lbz opened on Aug 4, 2026

HexStrike AI — Unauthenticated Remote Code Execution via /api/command Endpoint

Status: Open.

#223 In 0x4m4/hexstrike-ai;

· ez-lbz opened on Aug 4, 2026

HexStrike AI — Unauthenticated Arbitrary Python Code Execution via /api/python/execute

Status: Open.

#222 In 0x4m4/hexstrike-ai;

· ez-lbz opened on Aug 4, 2026

mcp connect failed

Status: Open.

#220 In 0x4m4/hexstrike-ai;

· fqhlxw520 opened on Jul 20, 2026

Installing tools on a sandboxed envrionment should be an option

Status: Open.

#211 In 0x4m4/hexstrike-ai;

· HatemMn opened on Jul 3, 2026

Security: Critical RCE via unsafe deserialization and command execution

Status: Open.

#204 In 0x4m4/hexstrike-ai;

· nkar123412-hub opened on Jun 12, 2026

Preventing unauthorized users from running pentest tools via your MCP server

Status: Open.

#203 In 0x4m4/hexstrike-ai;

· Marsssssssssssdsss opened on Jun 9, 2026

Proposal: Officially migrate build system to Astral UV for reproducible installs

Status: Open.

#199 In 0x4m4/hexstrike-ai;

· RAliane opened on Jun 3, 2026

Tik tok

Status: Open.

#190 In 0x4m4/hexstrike-ai;

· zuzannalesniewska-create opened on May 18, 2026