Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers

Overview

A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the network's access rules permit to connect to the target. The findings were

SpinGraph analysis pending — check back after processing.