Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
Tailscale's SSH forwarding bugs allowed compromised mesh nodes to escalate to root on peers — a lateral-movement risk for the growing number of enterprises embedding Tailscale in dev and production networks.
Summary written by editorial AI · Source link below
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch.
The flaws are in how Tailscale SSH forwards network connections, a job the Tailscale background process carries out with root privileges. To use them, an attacker must
Editorial Analysis
Overlay-network tools like Tailscale flatten traditional segmentation; privilege-escalation flaws in their SSH layer can turn a single compromised node into full mesh access.
Immediately update all Tailscale installations to ≥1.104.4 and restrict SSH ACLs to least-privilege across your tailnet.
A vulnerability in the popular mesh-networking tool Tailscale could allow a single compromised device to gain root access across the corporate network.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at THN (Feedburner) in a new tab.
More from the Vulnerabilities Desk
- SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks3d
- QNAP says hackers breaching NAS devices in Plex2Shell attacks3d
- Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time3d
- [NEU] [mittel] JetBrains CLion: Mehrere Schwachstellen3d
- [UPDATE] [mittel] Keycloak: Mehrere Schwachstellen3d