CVE-2026-45744

Published: Jun 5, 2026Modified: Jun 17, 2026

9.9

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.1 / Impact: 6.0

Source: security-advisories@github.com (Secondary)

Description

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/resolvePath endpoint in Termix is vulnerable to OS command injection. The endpoint uses double-quote escaping for shell command construction, which does not prevent $(...) and backtick command substitution. Any authenticated user with an active File Manager SSH session can execute arbitrary commands on the connected remote host. Version 2.3.2 patches the issue.

Affected (1)

Products: Termix: Termix

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Termix Termix	From 2.1.0 to 2.3.2

Related CWEs

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (3)

https://github.com/Termix-SSH/Termix/releases/tag/release-2.3.2-tag

Source: security-advisories@github.com

ProductRelease Notes

https://github.com/Termix-SSH/Termix/security/advisories/GHSA-37f4-wq95-pg33

Source: security-advisories@github.com

ExploitMitigationVendor Advisory

https://github.com/Termix-SSH/Termix/security/advisories/GHSA-37f4-wq95-pg33

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitMitigationVendor Advisory

Timeline

No history available yet.