CVE-2026-79759

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the POST /credentials/:id/deploy-to-host endpoint resolves credential and target-host records from attacker-controlled credentialId and targetHostId integer values without checking that either record belongs to the requesting user. In src/backend/database/routes/credentials.ts, differential errors reveal whether credential and host records exist and disclose each record's authType value. Properly encrypted passwords and keys are not disclosed, but a key-authenticated victim host can receive an outbound SSH connection attempt using the attacker's public key. This issue is fixed in version 2.5.1.

• CWE-639

• https://github.com/Termix-SSH/Termix/commit/b0598294a6aeed866f51ce58067f43c1d751c7a6
• https://github.com/Termix-SSH/Termix/commit/ddbdd5c437c2296607dfaa4265d6f63fbc1ca92e
• https://github.com/Termix-SSH/Termix/pull/1067
• https://github.com/Termix-SSH/Termix/releases/tag/release-2.5.1-tag
• https://github.com/Termix-SSH/Termix/security/advisories/GHSA-w4cf-69fj-g96f

Published

Sep 24, 2026

Last Modified

Sep 25, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-79750MCPHub is a unified hub for centrally managing and dynamical…7.7
• CVE-2026-79752CakePHP is a rapid development framework for PHP. Prior to 4…9.2
• CVE-2026-79754Nuclio is a "Serverless" framework for Real-Time Events and …7.1
• CVE-2026-79755Nuclio is a "Serverless" framework for Real-Time Events and …8
• CVE-2026-79756Nuclio is a "Serverless" framework for Real-Time Events and …8.7
• CVE-2026-79758Termix is a web-based server management platform with SSH te…5.4
• CVE-2026-7976Use after free in Views in Google Chrome prior to 148.0.7778…7.5
• CVE-2026-79760Termix is a web-based server management platform with SSH te…6.4
• CVE-2026-79761Termix is a web-based server management platform with SSH te…6.6
• CVE-2026-79762Termix is a web-based server management platform with SSH te…5.5
• CVE-2026-79763Termix is a web-based server management platform with SSH te…5.3
• CVE-2026-79764Termix is a web-based server management platform with SSH te…7.7