What exactly is the mechanism by which you think that an SSH RCE is "simple"?
Not OP, but agent forwarding is a significant concern.
Is it enabled by default though?
AFAIK: No
It's not, but there is likely a small number people who have something like this configured:
Host * ForwardAgent yes
Not OP, but agent forwarding is a significant concern.
Is it enabled by default though?
AFAIK: No
It's not, but there is likely a small number people who have something like this configured: