Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
// AI summary
A security researcher found unpatched Tailscale SSH flaws allowing a single hacked device to gain root access on other reachable servers if port forwarding is enabled.
// from the source
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the network's access rules permit to connect to the target. The findings were