CVE-2026-53545

Name of the Vulnerable Software and Affected Versions Termix versions prior to 2.3.2

Description An authenticated user can execute arbitrary commands on the source SSH host with the privileges of the connected SSH account. The issue occurs when the application interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into single-quoted pkill -f patterns within the teardown path of the 'DELETE /ssh/tunnel/disconnect/:tunnelName' endpoint. By including a single quote in a tunnel host field, an attacker can terminate the pattern and append shell commands that execute upon tunnel disconnection.

Recommendations Update to version 2.3.2.