Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers

A security researcher has revealed that a compromised device on a Tailscale network can be leveraged to gain root access to other reachable servers. The attack vector requires Tailscale SSH to be configured with port forwarding enabled and demands that the threat actor already controls a device permitted by the network’s access controls.