🤖 Unpatched Tailscale SSH privesc: a foothold on one tailnet device can yield root on every server its ACLs allow, no keys needed. Tailworm (Cyberdione Labs) tested 1.104.2 + headscale 0.29.5: no CVE, no patch. Only per-pair ACLs stopped the lab spread.
🔗 https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html
#CyberSec #Exploit #Tailscale #InfoSec
The Hacker NewsUnpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other ServersUnpatched Tailscale SSH flaws could let attackers gain root on permitted servers from a compromised device when port forwarding is enabled.