search
Tailscale SSH
Trends
- 1Tailscale publishes update on SSH incident investigation●Tailscale SSH: Investigation and remediation update
Tailscale has published an update on its investigation and remediation of an issue affecting its SSH product. The company outlined what happened and the steps being taken to address it. Readers on Hacker News are following the disclosure closely, keen for technical detail on the root cause and how Tailscale plans to prevent a recurrence.
- 2Tailscale patches SSH privilege boundary flaw reaching root-only sockets▼Tailscale says it failed to enforce privilege boundaries in Tailscale SSH: authorized peers with forwarding access could
Tailscale has disclosed that its SSH feature failed to enforce privilege boundaries: authorized peers with forwarding access could reach root-only sockets on target machines. The company says exploitation required an attacker to already have an authorized foothold and policy-permitted access, limiting exposure. Users are advised to update to Tailscale v1.104.4 or later and review their access policies.
- 3Unpatched Tailscale SSH flaw lets lateral root access spread across networks●🤖 Unpatched Tailscale SSH privesc: a foothold on one tailnet device can yield root on every server its ACLs allow, no ke
Security researchers at Cyberdione Labs, in a project called Tailworm, report an unpatched privilege escalation in Tailscale SSH: compromising a single device on a tailnet can yield root access on every server its access-control rules permit, without needing SSH keys. They tested Tailscale 1.104.2 with Headscale 0.29.5, finding no CVE or fix so far, with only strict per-pair ACLs stopping the spread in their lab.
- 4Researcher discloses 11 unpatched Tailscale SSH flaws without warning●Researcher publishes 11 unpatched Tailscale SSH flaws without warning
A security researcher has published details of 11 unpatched vulnerabilities affecting Tailscale's SSH functionality, apparently without coordinating disclosure with the company. The move raises questions about the risks of full disclosure when fixes are not yet available, since attackers could exploit the flaws in Tailscale, a tool widely used by companies to secure remote access to internal networks.