CyberSecBulletin

Termux vulnerabilities

We track 2 vulnerabilities in Termux products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 29, 2026.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest Termux vulnerabilities

  • 8.2 High severity

    proot-distro: Exposure of Resource to Wrong Sphere

    CVE-2026-54727Termux

    proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination

  • 8.2 High severity

    proot-distro: UNIX Symbolic Link (Symlink) Following

    CVE-2026-54574Termux

    proot-distro is a utility for managing proot containers. Prior to version 5.1.5, proot-distro install extracted plain tarball root filesystems through _extract_plain_tar() in proot_distro/commands/install.py and Docker layers through _apply_layer() in proot_di