Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
-
A researcher has disclosed that Tailscale SSH can be abused to escalate from a single compromised device to root on other reachable servers. The attack hinges on two preconditions: Tailscale SSH configured to permit port forwarding, and an attacker who already controls one device that the network's access rules allow to connect to the target.
The flaws remain unpatched at the time of reporting, so the exposure is a configuration and trust-boundary issue as much as a software one. Any environment relying on Tailscale SSH for administrative access should review whether port forwarding is enabled and how broadly its access rules permit device-to-device connections.
- Port forwarding through Tailscale SSH is a prerequisite for the attack
- The attacker must already control a device that access rules permit to reach the target
- No patch is currently available, per the report
Until a fix ships, tightening access rules and disabling unnecessary port forwarding limits the blast radius of a single compromised endpoint.
Source: The Hacker News
Does your organization rely on Tailscale SSH for server access, and have you reviewed your port forwarding settings in light of this?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login