CVE-2026-45743 is an authorization bypass vulnerability in Termix, a web-based server management platform. The issue arises because 16 file-manager endpoints do not verify ownership of the SSH session identified by sessionId. An authenticated attacker who can guess or obtain another user's active sessionId can access and manipulate files on the victim's SSH host. The vulnerability affects Termix versions prior to 2.3.2 and is fixed in version 2.3.2.

Successful exploitation allows an authenticated attacker to bypass authorization controls and gain unauthorized access to another user's SSH session. This enables the attacker to read, write, delete, download, and execute files on the victim's connected SSH host, potentially leading to significant confidentiality and integrity breaches. Availability impact is not indicated.

Upgrade Termix to version 2.3.2 or later, where this authorization bypass vulnerability is patched. Since the vendor advisory or patch links are not explicitly provided, verify the update availability from official Termix sources before applying.