Executive brief
Termix is a server management platform used to manage remote systems via SSH and file editing. A security flaw in the Termix Desktop application causes it to ignore security certificate warnings when connecting to servers. This allows an attacker on the same network (such as a public Wi-Fi) to intercept the connection, potentially stealing login credentials or session tokens and gaining full access to the managed servers.
Technical details
Termix Desktop (Electron) suffers from improper certificate validation (CWE-295) due to the global disabling of TLS checks. The application utilizes Electron startup flags such as '--ignore-certificate-errors' and configures custom HTTPS agents with 'rejectUnauthorized: false'. An attacker positioned in the network path can perform a machine-in-the-middle (MITM) attack by presenting a self-signed or invalid certificate, which the client will accept without warning. This enables the interception of sensitive authentication traffic, including JWTs and login credentials. As of the advisory publication, no patched version is available.
Affected products
- Termix-SSH Termix Desktop (Electron) >= 1.7.0
Timeline
- 2026-05-12: advisory: GitHub security advisory published
- 2026-06-05: disclosed: CVE published to NVD