CVE-2026-94140

Versions of Rex through 1.16.1 for Perl are vulnerable to a Man-in-the-Middle (MitM) attack during remote rsync transfers. The root cause is that the sync command hardcodes the SSH option StrictHostKeyChecking=no , which persists even if users attempt to set options via set_openssh_opt. This allo...