Tailscale Addresses Critical SSH Vulnerabilities Allowing Root Access Exploits

Tailscale released version 1.104.4 to address critical SSH vulnerabilities that could enable attackers to gain root access on other servers. The flaws involved improper handling of network connection forwarding by the Tailscale process running with elevated privileges.

Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch.

The flaws are in how Tailscale SSH forwards network connections, a job the Tailscale background process carries out with root privileges. To use them, an attacker must

Read original article