Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
Summary
A security researcher has discovered that unpatched flaws in Tailscale SSH could allow a compromised device on a Tailscale network to gain root access to other servers. This attack requires Tailscale SSH to be configured for port forwarding and an attacker to already control a device with access to the target server.
IFF Assessment
This vulnerability allows attackers to escalate privileges and gain root access on other servers, posing a significant risk to network security.
Severity
This vulnerability allows for significant impact, including unauthorized access and modification of data, and the attack vector is relatively straightforward given the prerequisites.
Defender Context
Defenders should ensure that Tailscale SSH is kept up-to-date and that port forwarding configurations are carefully reviewed and restricted. Network segmentation and strict access control lists are crucial to mitigate the impact of compromised devices on a network.