Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
Security researcher Erica Windisch found that a single hacked device on a Tailscale network can gain root access to other servers. Tailscale has not issued a security bulletin or fixed the issue.
Intelligence analysis by Qwen 2.5 (3B)
Security researcher finds Tailscale SSH flaws that could allow a hacked device to gain root access to other servers. Tailscale has not addressed the issue yet.
A bad guy can use a single hacked device to make other devices on a network do bad things, like let the bad guy control them. Tailscale is a way to connect devices on a network, and this flaw makes it easier for the bad guy to control more devices.
Analysis
{"heading_1":"Tailscale SSH Flaws","paragraph_1":"Users are advised to disable Tailscale SSH until the issue is resolved, as the current implementation is vulnerable to this type of attack.","paragraph_2":"Tailscale has provided a file hash for users to verify the integrity of the SSH implementation, and has advised users to disable Tailscale SSH until the issue is addressed.","paragraph_3":"Windisch tested Tailscale version 1.104.2 and headscale version 0.29.5, finding that a compromised device can spread to other devices on the network without user action, passwords, or stolen keys.","heading_2":"Impact of the Flaws","heading_3":"Recommendations for Users"}
Key points
- Tailscale SSH flaws allow a single hacked device to gain root access to other devices on the network
- Tailscale has acknowledged the issue but has not yet released a security bulletin or fixed the issue
- Users are advised to disable Tailscale SSH until the issue is resolved
Tailscale is working to fix the issue and users can take steps to protect their networks until the fix is available.
Until the issue is fixed, users should disable Tailscale SSH to prevent the bad guy from gaining control of their devices.
