CVE-2026-53549

Name of the Vulnerable Software and Affected Versions Termix versions prior to 2.3.2

Description An authenticated user can probe localhost, private networks, link-local metadata services, and other infrastructure reachable from the server. This occurs because the 'POST /host/db/proxy/test' endpoint accepts the singleProxy, proxyChain, and testTarget request fields without validating their destination addresses. The testProxyConnectivity() path utilizes raw TCP and SOCKS connections to attacker-selected hosts and ports. Consequently, structured connection errors may disclose host reachability and timing information, while successful metadata access can expose cloud credentials.

Recommendations Update to version 2.3.2.