Erica Windisch reports potential root access through Tailscale SSH

First reported by RuntimeWire at · Updated · 3 sources

The findings describe how a compromised device could be used to gain root access on other servers. The attack requires Tailscale SSH port forwarding to be enabled and the attacker to control a device permitted to connect to the target under network access rules, according to The Hacker News.

  • RuntimeWire says the assessment identified five issue classes across Tailscale and Headscale.
  • Windisch published the report, called Tailworm, on October 25.

Covered by 3 publishers within 5 hours of the first report.

Reporting3

RuntimeWire Erica Windisch publishes report alleging Tailscale SSH forwarding can reach root · Ryan Merket
Cyber Security News Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers From One Compromised Device · Guru Baran
The Hacker News Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers · info@thehackernews.com (The Hacker News)