Researchers Allege Tailscale SSH Flaw Could Grant Device Root Access

Researchers allege a serious flaw in Tailscale’s built-in SSH could allow a user with approved access to gain root access on a device, with an attack potentially spreading to other systems on the same network. The reported scenario begins with someone who already has approved access. That person could exploit Tailscale SSH to obtain root privileges on a device, the researchers say. They also warn the attack could extend to other devices connected to the network, potentially turning a single-device issue into a broader exposure. The warning applies to users running nodes through Tailscale.

Source: TokenPost