importantSYS.SOURCE: The Hacker News• 2026-10-25T23:14:09+05:30

Critical Unpatched Tailscale SSH Vulnerabilities Enable Privilege Escalation Across Networks

#vulnerability #ssh #network security #privilege escalation

A critical vulnerability in Tailscale's SSH implementation allows a compromised device to escalate privileges and gain root access on other networked servers. The exploit requires port forwarding configuration and pre-existing access to a device within the network's allowed scope.

A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week.

The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the network's access rules permit to connect to the target.

The findings were

Read original article

*** END OF TRANSMISSION ***

> MODERNA AND MERCK'S PERSONALIZED MRNA CANCER VACCINE DEMONSTRATES 42% REDUCTION IN MORTALITY AND RECURRENCE > DOLLY PARTON'S IMAGINATION LIBRARY: GLOBAL LITERACY INITIATIVE > REIMAGINING OBSERVABILITY: THE CASE FOR WIDE EVENTS OVER TRADITIONAL METRICS, LOGS, AND TRACES > OREGON POLICE IMPOSE $2.5M FEE FOR PUBLIC RECORDS REQUEST ON OFFICER MISCONDUCT CASE > CRITICAL UNPATCHED TAILSCALE SSH VULNERABILITIES ENABLE PRIVILEGE ESCALATION ACROSS NETWORKS > DIGITAL DISSIDENT DEVROOM AT FOSDEM 27: COMBATING INTERNET CENSORSHIP THROUGH COLLABORATIVE TOOL DEVELOPMENT > CRITIQUE OF EXCESSIVE NUANCE IN SOCIOLOGICAL THEORY > RECREATION OF ANCIENT ROMAN DICHROIC GLASS TECHNOLOGY BY UNIVERSITY OF SHEFFIELD RESEARCHERS > AI-ASSISTED PHP2SHELL EXPLOITATION TARGETS EUROPEAN GOVERNMENT ENTITY > OLDER CNN OUTPERFORMS STATE-OF-THE-ART LLMS IN SKIN CANCER DIAGNOSIS> MODERNA AND MERCK'S PERSONALIZED MRNA CANCER VACCINE DEMONSTRATES 42% REDUCTION IN MORTALITY AND RECURRENCE > DOLLY PARTON'S IMAGINATION LIBRARY: GLOBAL LITERACY INITIATIVE > REIMAGINING OBSERVABILITY: THE CASE FOR WIDE EVENTS OVER TRADITIONAL METRICS, LOGS, AND TRACES > OREGON POLICE IMPOSE $2.5M FEE FOR PUBLIC RECORDS REQUEST ON OFFICER MISCONDUCT CASE > CRITICAL UNPATCHED TAILSCALE SSH VULNERABILITIES ENABLE PRIVILEGE ESCALATION ACROSS NETWORKS > DIGITAL DISSIDENT DEVROOM AT FOSDEM 27: COMBATING INTERNET CENSORSHIP THROUGH COLLABORATIVE TOOL DEVELOPMENT > CRITIQUE OF EXCESSIVE NUANCE IN SOCIOLOGICAL THEORY > RECREATION OF ANCIENT ROMAN DICHROIC GLASS TECHNOLOGY BY UNIVERSITY OF SHEFFIELD RESEARCHERS > AI-ASSISTED PHP2SHELL EXPLOITATION TARGETS EUROPEAN GOVERNMENT ENTITY > OLDER CNN OUTPERFORMS STATE-OF-THE-ART LLMS IN SKIN CANCER DIAGNOSIS