Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

Tailscale has released version 1.104.4 to address critical security flaws in its built-in SSH server. The vulnerabilities reside in how Tailscale SSH handles network connection forwarding, a process executed with root privileges by the Tailscale background daemon. An attacker who has already compromised a device within a Tailscale network could potentially exploit these flaws to gain unauthorized access to services and files on other servers that should only be accessible by the root user. The flaws represent a significant privilege escalation and lateral movement risk within Tailscale-managed networks. Users are strongly advised to update to version 1.104.4 immediately to mitigate the risk.