CVE-2026-53542

Name of the Vulnerable Software and Affected Versions Termix versions prior to 2.3.2

Description The archive creation endpoint in src/backend/ssh/file-manager.ts passes selected file basenames to the tar utility without an end-of-options marker and without making the operands unambiguously relative. A user with access to an SSH file-manager session can select basenames starting with GNU tar options, such as --checkpoint=1 and --checkpoint-action=exec, which causes the creation of tar, tar.gz, tar.bz2, or tar.xz archives to interpret these names as options. This allows the execution of commands on the managed SSH host with the privileges of the connected SSH account, potentially leading to file disclosure, modification, and service disruption.

Recommendations Update to version 2.3.2.