CVE-2026-54548

Name of the Vulnerable Software and Affected Versions kas versions prior to 5.4

Description Internal SSH key setup triggered by SSH PRIVATE KEY or SSH PRIVATE KEY FILE creates a ~/.ssh/config file when no user-specific SSH configuration exists. The ssh no host key check() function in kas/libcmds.py adds a global Host * rule with StrictHostKeyChecking no without checking ctx.managed env. This causes the setting to persist after the tool exits, affecting future SSH sessions for the local user. Consequently, subsequent SSH connections may accept attacker-controlled host keys without verification, increasing the risk of a man-in-the-middle attack, which is an attack where a malicious actor intercepts communication between two parties to steal or manipulate data.

Recommendations Update to version 5.4.