Mmastodon TechnologyCybersecurity first seen 15 h ago, last 15 h ago, peak #6
Tailscale patches SSH privilege boundary flaw reaching root-only sockets
Original: Tailscale says it failed to enforce privilege boundaries in Tailscale SSH: authorized peers with forwarding access could
Tailscale has disclosed that its SSH feature failed to enforce privilege boundaries: authorized peers with forwarding access could reach root-only sockets on target machines. The company says exploitation required an attacker to already have an authorized foothold and policy-permitted access, limiting exposure. Users are advised to update to Tailscale v1.104.4 or later and review their access policies.
Why now: A security disclosure from a widely used networking tool prompts admins to check whether they need to patch and audit their configurations.
Evidence
- Tailscale says it failed to enforce privilege boundaries in Tailscale SSH: authorized peers with forwarding access could reach root-only sockets. The company says exploitation requires an authorized foothold and policy-permitted access. Update to v1.104.4 or later and review… · technotenshi@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/4028325