CVE-2026-45746

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-45746

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45746.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-45746

Aliases

GHSA-cx2r-843c-vww8

Published

2026-06-05T17:59:23.593Z

Modified

2026-07-15T01:49:20.659411970Z

Severity

9.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H CVSS Calculator

Summary

Termix Vulnerable to Arbitrary Command Execution via Session Hijacking

Details

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the File Manager functionality in Termix contains a critical Broken Access Control vulnerability due to improper validation of the sessionId parameter. The backend trusts a client-controlled identifier without verifying that it belongs to the authenticated user. This allows an attacker to manipulate the value and access active File Manager sessions belonging to other users. Since these sessions are tied to SSH connections to remote VPS instances, exploitation allows unauthorized interaction with another user's remote filesystem. Because the File Manager exposes functionality such as file reading, writing, uploading, and execution, this vulnerability enables direct command execution on another user's VPS (RCE). Version 2.3.2 patches the issue.

Database specific

{
    "cwe_ids": [
        "CWE-284",
        "CWE-639"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45746.json",
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/termix-ssh/termix

Affected ranges

Type

GIT

Repo

https://github.com/termix-ssh/termix

Events

Introduced

c67d914e61ef9fc6e97347337ea59ffa9196d560

Fixed

c3282b5dca081d52513e94329bbc71084338217d

Database specific

{
    "cpe": "cpe:2.3:a:termix:termix:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.3.2"
        },
        {
            "introduced": "2.1.0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

release-2.*

release-2.1.0-tag

release-2.2.0-tag

release-2.2.1-tag

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45746.json"