ChatGPT Desktop forwards your SSH agent to remote machines
The ChatGPT Desktop app forwards local SSH credentials to remote machines, enabling actions like pushing to private GitHub repos.
ChatGPT Desktop forwards your local SSH agent to remote machines. This means the remote machine can authenticate using your SSH keys and access private repositories. The issue was discovered in a pull request discussion and is not confirmed as actively exploited.
- Remote machine uses forwarded SSH credentials
- Can push to private GitHub repos
- Requires SSH key with fingerprint for security
Impact: SSH agent credentials forwarded to remote machines
| Product | Affected |
|---|---|
| OpenAI ChatGPT Desktop | — |
- Vendors
- OpenAI
- Products
- ChatGPT Desktop
From the original article
1 min read at news.ycombinator.com[](https://news. ycombinator. com/)Hacker Newsnew past comments ask show jobs submitlogin [](https://news.
By DenGorbachev · news.ycombinator.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.