<![CDATA[Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers]]>A researcher has disclosed that Tailscale SSH can be abused to escalate from a single compromised device to root on other reachable servers. The attack hinges on two preconditions: Tailscale SSH configured to permit port forwarding, and an attacker who already controls one device that the network's access rules allow to connect to the target.

The flaws remain unpatched at the time of reporting, so the exposure is a configuration and trust-boundary issue as much as a software one. Any environment relying on Tailscale SSH for administrative access should review whether port forwarding is enabled and how broadly its access rules permit device-to-device connections.

  • Port forwarding through Tailscale SSH is a prerequisite for the attack
  • The attacker must already control a device that access rules permit to reach the target
  • No patch is currently available, per the report

Until a fix ships, tightening access rules and disabling unnecessary port forwarding limits the blast radius of a single compromised endpoint.

Source: The Hacker News

Does your organization rely on Tailscale SSH for server access, and have you reviewed your port forwarding settings in light of this?

]]>https://xploitlk.com/topic/790/unpatched-tailscale-ssh-flaws-could-let-a-hacked-device-reach-root-on-other-serversRSS for NodeTue, 27 Oct 2026 07:24:53 GMTSun, 25 Oct 2026 18:30:17 GMT60