Every SSH Server Ever Shipped Lets an Authenticated User Run Commands Remotely

ssh2RCE

A satirical advisory, SSH2RCE-0022, presents the exec channel in RFC 4254 §6.5 as a critical remote code execution flaw. Any user with valid credentials can run arbitrary commands on port 22, with output returned, and no patch exists because the behavior is intentional. The site traces the path through OpenSSH 10.6p2 source, notes that all 104 OpenSSH releases and other servers like Dropbear and Paramiko are affected, and shows that logs record a normal login without the command.