PT-2026-39220 · Termix · Termix

Luke Gus · Published 2026-05-08 · Updated 2026-05-21 · CVE-2026-42454

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Termix versions prior to 2.1.0

Description Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing capabilities. All Docker container management endpoints interpolate the containerId URL path parameter and WebSocket message field directly into shell commands executed via the exec() function of ssh2.Client on remote managed servers without sanitization or validation. An authenticated attacker can inject arbitrary OS commands by crafting a malicious container ID, leading to Remote Code Execution on any managed server.

Recommendations Update to version 2.1.0.

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-42454

Affected Products

Termix

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-42454 · Security Note
• https://github.com/Termix-SSH/Termix/releases/tag/release-2.1.0-tag · Note
• https://github.com/Termix-SSH/Termix/security/advisories/GHSA-c2g2-hqgq-6w9v · Note
• https://twitter.com/integ_sec/status/2057478648374952029 · Twitter Post
• https://twitter.com/CVEnew/status/2053131405677449295 · Twitter Post
• https://twitter.com/lyrie_ai/status/2054455855416811754 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2052909162787422630 · Twitter Post
• https://twitter.com/lyrie_ai/status/2054455854632419460 · Twitter Post
• https://t.me/CVEtracker/53179 · Telegram Post
• https://twitter.com/KaitanSecurity/status/2052893830865621463 · Twitter Post