kas Persistently Disables SSH Host Key Checking

Summarykas persistently disables SSH host key checking for the invoking user when internal SSH key setup is triggered via SSHPRIVATEKEY or SSHPRIVATEKEYFILE and no user-specific SSH configuration file exists so far.When this path is used, kas creates /.ssh/config with a global Host rule containin...

CVE-2026-32318

Cryptomator for iOS prior to 2.8.3 had an integrity-check vulnerability that allowed tampering of the vault.config file, enabling a MITM in the Hub key loading process. The client trusted endpoints from vault config without host authenticity checks, potentially enabling token exfiltration by mixi...