Unverified50% confidenceFactExact time
ssh-agent exposes a Unix domain socket, whose path is typically stored in the environment variable SSH_AUTH_SOCK, through which other programs send signing requests
1
Sources
50%
Confidence
Long-term
Relevance
9/23/2026
First Seen
Sources
Related Entities
Related Claims
Unverified在类 Unix 系统中，SSH 协议规范要求私钥存放在 ~/.ssh/ 目录77% similarUnverifiedThe core security risk of SSH agent forwarding is that once a remote host is compromised, an attacker can use the forwarded agent socket to impersonate the user and access other systems without ever touching the private key itself77% similarUnverified工具投毒攻击可将读取 SSH 私钥并外传的隐藏指令暗藏在工具描述中，同时返回正确结果73% similarUnverifiedLong-term holding of shell sessions on the server side involves resource consumption and security boundaries—if the agent has a vulnerability, an attacker could potentially take over the session without re-authenticating.69% similarUnverifiedSSRF is a class of web security vulnerability in which an attacker manipulates a server-side application into making HTTP requests to unintended internal or external addresses.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/945311API
curl https://kongchang.com/api/v1/knowledge/claims/945311MCP
get_claim(id=945311)