CVE-2026-45744

critical · 9.9

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/resolvePath endpoint in Termix is vulnerable to OS command injection. The endpoint uses double-quote escaping for shell command construction, which does not prevent $(...) and backtick command substitution. Any authenticated user with an active File Manager SSH session can execute arbitrary commands on the connected remote host. Version 2.3.2 patches the issue.

9.9

CVSS

2.0%

EPSS (exploit prob.)

80th

EPSS percentile

2026-06-05

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-78

Affected products

Vendor	Product	Affected versions
termix	termix	>= 2.1.0, < 2.3.2

Check a specific version with /api/v1/cve/match.

References

https://github.com/Termix-SSH/Termix/releases/tag/release-2.3.2-tag
https://github.com/Termix-SSH/Termix/security/advisories/GHSA-37f4-wq95-pg33
https://github.com/Termix-SSH/Termix/security/advisories/GHSA-37f4-wq95-pg33

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-45744