CVE-2026-45744: Termix has an OS Command Injection in File Manager resolvePath endpoint
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/filemanager/ssh/resolvePath endpoint in Termix is vulnerable to OS command injection. The endpoint uses double-quote escaping for shell command construction, which does not prevent $(...) and backtick command substitution. Any authenticated user with an active File Manager SSH session can execute arbitrary commands on the connected remote host. Version 2.3.2 patches the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Termixto a version that resolves this vulnerability.Fixed in 2.3.2 - Configuration
Disable File Manager SSH sessions in Termix (or otherwise restrict File Manager SSH access) until the application is upgraded to 2.3.2.
Termix File Manager File Manager SSH access = disabled - Compensating control
Restrict access to the File Manager and SSH management endpoints to trusted IPs/networks and limit which users can open File Manager SSH sessions (use firewall/ACLs, network segmentation, or access controls) until Termix is updated to 2.3.2.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45744?
CVE-2026-45744 has a critical severity rating of 9.9.
How do I fix CVE-2026-45744?
To fix CVE-2026-45744, update Termix to version 2.3.2 or later.
What type of vulnerability is CVE-2026-45744?
CVE-2026-45744 is an OS command injection vulnerability in the File Manager resolvePath endpoint.
What could happen if CVE-2026-45744 is exploited?
Exploiting CVE-2026-45744 could allow an attacker to execute arbitrary commands on the server.
Which software is affected by CVE-2026-45744?
CVE-2026-45744 affects the Termix software prior to version 2.3.2.