Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

Tailscale has issued a patch for vulnerabilities in its built-in SSH server. The flaws could allow an attacker to access services and files on other servers that are normally restricted to the root user. The issues are related to how Tailscale's SSH server forwards network connections, which it does with root privileges. An attacker would need to exploit these flaws to gain unauthorized access. Tailscale has released version 1.104.4 to address the vulnerabilities. The patch aims to prevent hacked devices from gaining root access on other servers.