Researchers Allege Tailscale SSH Flaw Could Grant Device Root Access

Researchers allege a serious flaw in Tailscale’s built-in SSH could allow a user with approved access to gain root access on a device, with an attack potentially spreading to other systems on the same network.

The reported scenario begins with someone who already has approved access. That person could exploit Tailscale SSH to obtain root privileges on a device, the researchers say. They also warn the attack could extend to other devices connected to the network, potentially turning a single-device issue into a broader exposure.

The warning applies to users running nodes through Tailscale. They are urged to disable Tailscale SSH and install an update after a patch becomes available.

The key concern for network operators is that approved access may lead to root control on one device and possible spread to others. The allegation centers on the service’s built-in SSH feature and the privileges an attacker could obtain by exploiting it.

Tailscale had not responded by 10:23 a.m. ET Sunday (14:23 UTC).