CVE-2026-45744

Name of the Vulnerable Software and Affected Versions Termix versions prior to 2.3.2

Description Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing capabilities. An OS command injection exists in the "/ssh/file manager/ssh/resolvePath" endpoint. The issue arises because the endpoint employs double-quote escaping during shell command construction, which fails to block command substitution using backticks or the $(...) syntax. This allows any authenticated user with an active File Manager SSH session to execute arbitrary commands on the connected remote host.

Recommendations Update to version 2.3.2.