Unpatched Tailscale SSH flaws could let a compromised tailnet device gain root on reachable servers

50/100

A researcher reported that one compromised device on a Tailscale network can gain root on other servers it can reach. The attack works only when Tailscale SSH allows port forwarding and access rules let that device connect to the target. The flaws are reported as unpatched, so review Tailscale SSH port-forwarding settings and access rules.

Digest of 2026-10-26

Sources

• The Hacker News — Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers