Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

Overview

Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale SSH forwards network connections, a job the Tailscale background process carries out with root privileges. To use them, an attacker must

SpinGraph analysis pending — check back after processing.