CVE-2026-45750

Critical

Description

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/resolvePath endpoint in the Termix File Manager component unsafely processes the path parameter and embeds it into a shell command executed over the active SSH session. Because the user-controlled value is placed inside double quotes and only double quotes are escaped, shell command substitution syntax such as $(...) is still interpreted by the remote shell. Version 2.3.2 fixes the issue.

SeverityCritical

CVSS9.0

Exploit probability—

ProductTermix

PublishedJun 5, 2026

First seenJun 5, 2026

Weakness typeCWE-78OS command injection CWE-639Authorization bypass through user-controlled key

How to fix

Update

termix termix2.3.2 or later

Affected products

Product	Affected versions	Fixed in
termix termix	2.1.0 ≤ v < 2.3.2	2.3.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.