ChatGPT Desktop Auto-Forwards SSH Agents to Remote Machines, Letting Agents Push to GitHub as You
Summary
A Hacker News report Sunday shows ChatGPT Desktop silently enables SSH agent forwarding to any remote host it connects to, letting a Codex agent running on that machine authenticate as you — including pushing to your private GitHub repositories. Commenters tie the behavior to openai/codex pull request #28131, and flag it as a fundamental design flaw with no per-signature approval prompt.
Originally reported by news.ycombinator.com
Read the original article →Original headline: ChatGPT Desktop Auto-Forwards SSH Agents to Remote Machines, Letting Agents Push to GitHub as You