Command Injection in Termix File Manager resolvePath Endpoint

CVE-2026-45750 is a command injection vulnerability in Termix, a web-based server management platform that provides SSH terminal, tunneling, and file editing capabilities. In versions prior to 2.3.2, the File Manager endpoint GET /ssh/file_manager/ssh/resolvePath unsafely handles the path parameter by embedding attacker-controlled input into a shell command executed over an active SSH session. Although double quotes are escaped, the implementation still places the user-supplied value inside double quotes, allowing shell command substitution syntax such as $(...) to be evaluated by the remote shell. As a result, an attacker can inject commands that execute in the context of the SSH session associated with the Termix-managed remote host.