Tailscale SSH Vulnerability: Root Access Risk Across Servers
A newly disclosed security flaw in Tailscale SSH could allow an attacker who compromises one device to gain root access across other servers in the same tailnet.
What we know
An account on X reported on a new security advisory warning that Tailscale SSH has flaws enabling lateral movement — from a single compromised device to root access on other servers. The report generated significant engagement (309K views, 559 RTs, 2,764 likes), reflecting the broad adoption of Tailscale in developer and startup infrastructure. No patch details were specified in the tweet, so users should consult the full report at cybersecuritynews.com/tailscale-ssh-flaws.
How the story developed
A newly disclosed security flaw in Tailscale SSH could allow an attacker who compromises one device to gain root access across other servers in the same tailnet.
Researcher Erica Windisch published 11 unpatched Tailscale flaws without coordinated disclosure. SSH race conditions can allow a hacked device to gain root access on other servers and add rogue nodes.
By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.