Public posts with this hashtag.
Tailscale says it failed to enforce privilege boundaries in Tailscale SSH: authorized peers with forwarding access could reach root-only sockets. The company says exploitation requires an authorized foothold and policy-permitted access. Update to v1.104.4 or later and review SSH policies.
tailscale.comTailscale SSH: Investigation and remediation updateAn update on the Tailscale SSH security investigation, remediation progress, and what customers can do now.
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
#Tailscale
https://thehackernews.com/2026/10/tailscale-patches-ssh-flaws-that-could.html
The Hacker NewsTailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other ServersTailscale 1.104.4 fixes SSH forwarding flaws that could expose root-only sockets, while related issues remain unpatched in headscale.
Explore the critical Tailscale Tailworm vulnerability report detailing 11 severe security flaws in Tailscale and headscale, including root access exploits.
#Tailscale #Tailworm #CyberSecurity #Vulnerability #Headscale #InfoSec
https://dailytechnow.com/tailscale-tailworm-vulnerability-report/
Daily Tech NowTailscale Tailworm Vulnerability Report: Severe Flaws FoundExplore the critical Tailscale Tailworm vulnerability report detailing 11 severe security flaws in Tailscale and headscale, including root access exploits.
A severe Tailscale SSH vulnerability allows attackers on authorized nodes to exploit Unix socket forwarding and escalate privileges to root access.
#Tailscale #TailscaleSSH #PrivilegeEscalation #Cybersecurity #InfoSec
🤖 Unpatched Tailscale SSH privesc: a foothold on one tailnet device can yield root on every server its ACLs allow, no keys needed. Tailworm (Cyberdione Labs) tested 1.104.2 + headscale 0.29.5: no CVE, no patch. Only per-pair ACLs stopped the lab spread.
🔗 https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html
#CyberSec #Exploit #Tailscale #InfoSec
The Hacker NewsUnpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other ServersUnpatched Tailscale SSH flaws could let attackers gain root on permitted servers from a compromised device when port forwarding is enabled.
🤖 Unpatched Tailscale SSH flaws: one compromised device on a tailnet can be used to gain root on other servers it can reach. Requires Tailscale SSH with port forwarding allowed, plus an attacker already controlling a device the ACLs permit to connect. No patch yet.
🔗 https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html
#CyberSec #InfoSec #SSH #Tailscale
The Hacker NewsUnpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other ServersUnpatched Tailscale SSH flaws could let attackers gain root on permitted servers from a compromised device when port forwarding is enabled.
A researcher reports unpatched Tailscale SSH flaws enabling a compromised tailnet device to gain root SSH access on other servers. This matters because it breaks zero-trust device assumptions and enables silent lateral movement to critical systems. #Tailscale #SshSecurity #PrivilegeEscalation
https://cyberworldops.eu/en/researcher-reports-tailscale-ssh-flaws-that-could-turn-one-compromised
CyberWorldOpsResearcher reports Tailscale SSH flaws that could turn one compromised device into root accessResearcher reports Tailscale SSH flaws that could turn one compromised device into root access
Tailscale SSH users: review who can connect to your computers.
Reported flaws could let an authorized user gain administrator control under certain conditions.
Tailscale’s VP of Engineering says on Reddit that fixes are in progress; the company isn’t recommending everyone disable SSH.
No confirmed real-world attacks found in our Oct. 25 review.
https://www.reddit.com/r/Tailscale/comments/1xeoj1l/recent_tailscale_vulnerability_reports/
I set up my home server around 1.5 years ago, and somehow it's still super satisfying streaming music to the car from my phone, knowing that #Finamp, #Jellyfin, #Caddy, #CoreDNS, #netfilter, #Linux, #Docker, #Tailscale and #DuckDNS are all working together perfectly to make this miracle happen. Everything just works™. I'm so grateful to the people who make this possible by creating all of this software and the dependencies. Especially the ones who code it themselves.
Trying out #Tailscale. Seems very easy to setup and use. I tend to use it to connect two NAS units. Tried out bare #Wireguard but it doesn’t seem that’s the very easy to do on a Synology. Will see how this works out.
Considering it took until the end of the day for me to remember that Nextcloud is written in PHP, I sure am glad I made that move a few weeks ago:
https://plbrault.com/blog-posts/i-now-use-tailscale-to-access-my-self-hosted-apps/
#PHP #PHP2shell #Cybersecurity #SelfHosting #Nextcloud #tailscale
Headscale: Your Own Tailscale Network
Headscale 0.29.5 as your own control server behind Traefik: join nodes, MagicDNS, an embedded DERP relay, ACLs and an exit node – without anyone else's cloud.
ServerkücheHeadscale: Your Own Tailscale NetworkHeadscale 0.29.5 as your own control server behind Traefik: join nodes, MagicDNS, an embedded DERP relay, ACLs and an exit node – without anyone else's cloud.
