The vulnerability is not that serious From what I understand - if you scp any file from a remote server to your home directory, malicious remote server can cop

The vulnerability is not that serious From what I understand - if you scp any file from a remote server to your home directory, malicious remote server can copy anything else into your home directory without you knowing it, which can lead to remote code execution. However, (1) the server needs to be malicious or compromised (or mitmd and you accept the new cert), (2) you need to copy into your home folder, not anywhere else, directory traversal is impossible