CVE-2025-35028: HexStrike AI MCP Server Command Injection
By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant composed command is executed directly in the context of the MCP server’s normal privilege; typically, this is root. There is no attempt to sanitize these arguments in the default configuration of this MCP server at the affected version (as of commit 2f3a5512 in September of 2025).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-35028?
The severity of CVE-2025-35028 is classified as critical due to its potential to allow command execution in high-privilege contexts.
How do I fix CVE-2025-35028?
To fix CVE-2025-35028, ensure that input validation is implemented to sanitize command-line arguments before processing them.
What systems are affected by CVE-2025-35028?
CVE-2025-35028 affects the HexStrike AI MCP Server, specifically when using the EnhancedCommandExecutor class.
Are there any workarounds for CVE-2025-35028?
As a workaround for CVE-2025-35028, consider disabling or limiting access to the API endpoint that processes command-line arguments.
What happens if CVE-2025-35028 is exploited?
Exploitation of CVE-2025-35028 can allow an attacker to execute arbitrary commands with the same privileges as the MCP server.