Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers

A security researcher published findings this week showing that a single hacked device on a Tailscale network can gain root access to other servers it can reach. The attack requires Tailscale SSH configured to allow port forwarding and an attacker already controlling one device permitted by access rules to connect to the target. The vulnerabilities remain unpatched.