Hacker News Reader

Comment by applfanboysbgon | Hacker News Reader

What exactly is the mechanism by which you think that an SSH RCE is "simple"?

Not OP, but agent forwarding is a significant concern.

Is it enabled by default though?

AFAIK: No

It's not, but there is likely a small number people who have something like this configured:

  Host *
  ForwardAgent yes