Locking the SSH agent disabled its own restrictions
OpenSSH 10.5 shipped 36 days after the previous release with an uncomfortable fix: with the agent locked, forwarded sessions were treated as local. What that means if you forward your agent to a jump host, why a CVSS of 3.5 will move nobody even though the bug voids your restrictions, and what we are checking this week.
Microsoft 365
ES 
CAT 
EN