> So, is this a vulnerability? Well no, not exactly [...] Connecting to a compromised machine with `ssh -A` (agent forwarding) lets the attacker use your crede

> So, is this a vulnerability? Well no, not exactly [...] Connecting to a compromised machine with `ssh -A` (agent forwarding) lets the attacker use your credentials for ssh sessions elsewhere. It's almost explained in the man page. Avoid the agent forwarding and you are fine.