A debugger injecting code into a process under the same context isn&#x27;t a vulnerability. It&#x27;s supposed to be able to do that. And OpenSSH is supposed to allow you to multiplex sessions. It&#x27;s a feature.<p>The vulnerability is the attacker being able to run arbitrary code as the user.