Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
// AI summary
Tailscale released version 1.104.4 to fix SSH flaws allowing attackers to reach root-level services and files on other servers via the background process.
// from the source
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale SSH forwards network connections, a job the Tailscale background process carries out with root privileges. To use them, an attacker must