Unpatched Tailscale SSH Flaws Let a Hacked Device Reach Root on Other Servers

A security researcher found that a single compromised device on a Tailscale network can be used to gain root access to other reachable servers. The attack requires Tailscale SSH with port forwarding enabled and access rules permitting the hacked device to connect to the target.

• Attack requires Tailscale SSH with port forwarding enabled
• One compromised device with access to the target is enough
• The flaws remain unpatched