CVE-2026-45743

Published: Jun 5, 2026Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: security-advisories@github.com (Secondary)

Description

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. 16 file-manager endpoints in Termix prior to version 2.3.2 do not verify that the requesting user owns the SSH session identified by `sessionId`. An authenticated attacker who knows or guesses another user's active `sessionId` can read, write, delete, download, and execute files on the victim's connected SSH host. Version 2.3.2 patches the issue.

Affected (1)

Products: Termix: Termix

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Termix Termix	From 2.1.0 to 2.3.2

Related CWEs

Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (3)

https://github.com/Termix-SSH/Termix/releases/tag/release-2.3.2-tag

Source: security-advisories@github.com

ProductRelease Notes

https://github.com/Termix-SSH/Termix/security/advisories/GHSA-5fqh-77cr-jj5x

Source: security-advisories@github.com

ExploitMitigationVendor Advisory

https://github.com/Termix-SSH/Termix/security/advisories/GHSA-5fqh-77cr-jj5x

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitMitigationVendor Advisory

Timeline

No history available yet.