Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers

A security researcher has discovered that a single compromised device on a Tailscale network can be used to gain root access to other servers. This is possible if Tailscale SSH is set up to allow port forwarding and the attacker already controls a device that is permitted to connect to the target server. The vulnerability can be exploited by an attacker who has control of one device on the network. The researcher recently published the findings, highlighting a potential security risk for Tailscale users. The attack relies on the existing access rules of the network, allowing the compromised device to reach other servers. The vulnerability remains unpatched, posing a risk to affected systems.