GCVE-110-VULN-PYPI-2026-000616

skopos-fleet 0.2.0 added a remediation git push (remediation.git_push.GitPusher._git) that runs ssh with StrictHostKeyChecking=no and UserKnownHostsFile=/dev/null whenever an SSH key is configured, on the reasoning that the remote is a Gitea container on the same host. The remote URL is configurable (SKOPOS_AGENT_REPO_URL), so for any other host a party between the collector and the remote can impersonate it, receive the pushed commits and answer fetches with its own. Fixed in 0.2.1: a remote on this host (a loopback address, localhost or a single-label container name) keeps the unchecked policy; every other host is pinned on first use (StrictHostKeyChecking=accept-new) in ~/.skopos/known_hosts (SKOPOS_KNOWN_HOSTS) and refused if its key changes. Affects 0.2.0 only. The collector's own SSH host-key default is a separate weakness (GCVE-110-PYPI-2026-021896).