Understanding the OpenSSH 10.4 ssh-agent Vulnerability
A vulnerability in OpenSSH 10.4 allows locked ssh-agent to expose local-only keys to remote servers when agent forwarding is used. This issue was fixed in OpenSSH 10.5. Security practitioners should understand the flaw's root cause, attack surface, and defensive measures to protect against potential exploitation.