Via @GossiTheDog@cyberplace.social the OpenSSH team has reported a vulnerability that permits passwordless logins in systems running sshd "built and run with PAM support disabled" on musl libc based systems. https://www.openssh.org/releasenotes.html While this does sound exotic - and it sort of is, this setup seems to only be default behavior in Alpine Linux and Void Linux systems - Alpine underpins a _lot_ of Docker containers, so if this matters to you at all it probably matters a lot. https://hub.docker.com/_/alpine