CVE-2026-45748 Details
Description
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The `POST /ssh/tunnel/connect` endpoint in Termix prior to version 2.3.2 builds an SSH tunnel command by interpolating user-controlled host record fields (`endpointIP`, `endpointUsername`, `password`) directly into a shell command without escaping, allowing persistent OS command injection on the source SSH host. Version 2.3.2 patches the issue.
A remote code execution vulnerability has been identified in Termix, a web-based server management platform, in versions prior to 2.3.2. The issue arises in the 'POST /ssh/tunnel/connect' endpoint, where user-controlled fields are interpolated into a shell command without proper escaping. This flaw allows for persistent OS command injection on the source SSH host. The vulnerability can be exploited by creating a host record with a malicious IP that, when the tunnel is connected, executes the injected command on the SSH host.
Users are advised to update Termix to version 2.3.2 or later, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 9, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Termix-SSH/Termix/security/advisories/GHSA-xmjh-8cc2-qm49 | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/Termix-SSH/Termix/releases/tag/release-2.3.2-tag | [email protected] | ProductRelease Notes |
| https://github.com/Termix-SSH/Termix/security/advisories/GHSA-xmjh-8cc2-qm49 | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| termix termix | >= 2.1.0, < 2.3.2 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 8, 2026 | CVE Modified | CISA-ADP |
| Jun 8, 2026 | Initial Analysis | [email protected] |
| Jun 5, 2026 | New CVE Received | [email protected] |