Termix-SSH Termix up to 2.3.1 Archive Creation Endpoint file-manager.ts information disclosure

Summaryinfo

A vulnerability has been found in Termix-SSH Termix up to 2.3.1 and classified as problematic. This affects an unknown part of the file src/backend/ssh/file-manager.ts of the component Archive Creation Endpoint. Performing a manipulation results in information disclosure. This vulnerability is reported as CVE-2026-53542. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability classified as problematic has been found in Termix-SSH Termix up to 2.3.1. This affects an unknown part of the file src/backend/ssh/file-manager.ts of the component Archive Creation Endpoint. The manipulation with an unknown input leads to a information disclosure vulnerability. CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. The summary by CVE is:

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the archive creation endpoint in src/backend/ssh/file-manager.ts passes selected file basenames to tar without an end-of-options marker and without making the operands unambiguously relative. A user with access to an SSH file-manager session can select basenames beginning with GNU tar options such as --checkpoint=1 and --checkpoint-action=exec, causing tar, tar.gz, tar.bz2, or tar.xz creation to interpret those names as options. The resulting checkpoint action executes commands on the managed SSH host with the privileges of the connected SSH account, allowing file disclosure, modification, and service disruption. This issue is fixed in version 2.3.2.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2026-53542 since 06/09/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1592 for this issue.

Upgrading to version 2.3.2 eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• SSH Server Software

Vendor

• Termix-SSH

Name

• Termix

Version

• 2.3.0
• 2.3.1

Website

• Product: https://github.com/Termix-SSH/Termix/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion