Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
Classification: Important, Solution: Workaround, Exploit Maturity: Proof-of-Concept, CVSSv3.1: None, CVEs: , Summary: A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the network's access rules permit to connect to the target. The…
Tailscale FI