“git pull” over SSH and have your system RCEd? I’d say it levels above “neat”. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		ivlad on July 20, 2023 \| parent \| context \| favorite \| on: Remote code execution in OpenSSH’s forwarded SSH-a... “git pull” over SSH and have your system RCEd? I’d say it levels above “neat”.

franga2000 on July 20, 2023 [–]

You'd need to go out of your way to make git pull do agent forwarding and I can't really think of a reason why anyone would.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact