news.ycombinator.com via Hacker News

ChatGPT Desktop Auto-Forwards SSH Agents to Remote Machines, Letting Agents Push to GitHub as You

Summary

A Hacker News report Sunday shows ChatGPT Desktop silently enables SSH agent forwarding to any remote host it connects to, letting a Codex agent running on that machine authenticate as you — including pushing to your private GitHub repositories. Commenters tie the behavior to openai/codex pull request #28131, and flag it as a fundamental design flaw with no per-signature approval prompt.