A security researcher has disclosed unpatched flaws in Tailscale SSH that let an attacker who already controls one device on a network pivot to root access on other reachable machines. The attack chain depends on Tailscale SSH being configured to allow port forwarding, turning a single compromised endpoint into a path toward full control of neighboring servers. Tailscale has not yet shipped a fix, so admins relying on SSH port forwarding should review their access rules in the meantime.
// source: thehackernews.com ↗