Tech · 7 d ago
Researcher reports unpatched Tailscale SSH flaws that could give root access
Security researcher Erica Windisch says one hacked device on a Tailscale network could gain root access to other servers it can reach, if Tailscale SSH allows port forwarding. Her report was published on Oct 25.
What we know
- Tested in a lab, not on real networks
- Tailscale says it found issues to fix
Not yet
- Which setups are affected
- Whether other researchers confirm it
The findings come from lab tests, not attacks on real networks, and Tailscale has issued no patch, CVE or fixed version yet.
What administrators can do
Administrators can write SSH rules as single source-to-destination pairs, turn off SSH port forwarding where possible and turn on node-key expiry.
