Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers From One Compromised Device

Researcher publishes 11 unpatched Tailscale SSH flaws without warning

Erica Windisch of Cyberdione Labs found a race condition in Tailscale SSH socket forwarding that runs connections as root. An attacker already holding one approved device could reach root on another machine and mint a new enrolment key, planting a rogue device the network trusts.

Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware - National Cyber Security Consulting

A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the […] Thank you for subscribing to our RSS feed!

Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers

A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. The report, called Tailworm, was published on October 25, 2026, by security researcher Erica Windisch

Researchers Allege Tailscale SSH Flaw Could Grant Device Root Access

The alleged attack could spread to other devices on the same network. Users running Tailscale nodes are urged to disable SSH and update after a patch is released.

Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers From One Compromised Device

A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. The report, called Tailworm, was published on October 25, 2026, by security researcher Erica Windisch […]