CVE-2026-45750: Termix Vulnerable to Arbitrary Command Execution in File Manager
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/filemanager/ssh/resolvePath endpoint in the Termix File Manager component unsafely processes the path parameter and embeds it into a shell command executed over the active SSH session. Because the user-controlled value is placed inside double quotes and only double quotes are escaped, shell command substitution syntax such as $(...) is still interpreted by the remote shell. Version 2.3.2 fixes the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Termixto a version that resolves this vulnerability.Fixed in 2.3.2
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45750?
CVE-2026-45750 is classified as critical with a severity score of 9.
How do I fix CVE-2026-45750?
To fix CVE-2026-45750, upgrade to Termix version 2.3.2 or later.
What is the risk associated with CVE-2026-45750?
CVE-2026-45750 has a risk score of 74, indicating a significant threat to systems using an affected version of Termix.
What type of vulnerability is CVE-2026-45750?
CVE-2026-45750 is categorized as an OS Command Injection vulnerability.
What component of Termix is affected by CVE-2026-45750?
The vulnerability affects the File Manager component of Termix, specifically the GET /ssh/file_manager/ssh/resolvePath endpoint.