CVE-2026-45745: Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theft
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Starting in version 1.7.0, Termix Desktop (Electron) disables TLS certificate validation, allowing a machine-in-the-middle attacker to intercept and modify HTTPS traffic to the configured Termix server. This can lead to credential theft and JWT/session theft during login and normal use. As of time of publication, no known patched versions are available.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Termix Desktop (Electron)from your environment.Uninstall Termix Desktop (Electron) from endpoints and do not use the desktop client until a patched version is released.
- Compensating control
Block or prevent use of the Termix Desktop client via network/endpoint policies. Restrict access to the Termix server to trusted networks (for example, require VPN access or firewall rules limiting source IPs) to reduce the risk of a man-in-the-middle intercepting traffic.
- Operational
Assume exposed credentials and session tokens for users who used the vulnerable desktop client: rotate passwords and API keys, invalidate/revoke JWTs and active sessions, and force re-authentication once mitigations are in place.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45745?
The severity of CVE-2026-45745 is rated as high with a score of 8.
How do I fix CVE-2026-45745?
To fix CVE-2026-45745, update to the latest version of Termix Desktop that addresses the improper certificate validation issue.
What impact does CVE-2026-45745 have on my system?
CVE-2026-45745 allows an attacker to perform a man-in-the-middle attack, potentially leading to credential and token theft.
Which versions of Termix are affected by CVE-2026-45745?
CVE-2026-45745 affects Termix Desktop (Electron) starting from version 1.7.0.
What does improper certificate validation mean in the context of CVE-2026-45745?
Improper certificate validation in CVE-2026-45745 means that the application does not properly verify TLS certificates, which can lead to insecure HTTPS connections.