Rex through 1.16.1 accepts unknown SSH host keys (CVE-2026-94140)
The Perl automation tool hardcodes StrictHostKeyChecking=no for remote rsync, so an unknown SSH host key is accepted.
1 stories, newest first · one card per story
The Perl automation tool hardcodes StrictHostKeyChecking=no for remote rsync, so an unknown SSH host key is accepted.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views