exploited in the wild · published 2026-10-29
An attacker uses the planted SSH backdoor key to log in to your machine remotely without your password, giving them full shell access. They can then read files and steal tokens, SSH keys and API keys stored on the machine.
Fixed in: 2.1.314
Source: thehackernews.com
You are affected if the installed version is older than 2.1.314. Check the version you have and update to 2.1.314 or later. The fixed version is verified against a vendor or advisory source.
FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 1789 and your operating system.