Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

Tailscale released version 1.104.4 to patch flaws in its built-in SSH server that could let attackers on a compromised device gain root access to other servers. The vulnerabilities stem from how Tailscale SSH forwards network connections with root privileges, potentially exposing services and files meant for root users only. Exploitation requires an attacker to have already compromised a device.