Tailscale Patches Critical SSH Flaws Allowing Root Access on Other Servers

Tailscale has released version 1.104.4 to address critical vulnerabilities in its built-in SSH server, which could enable attackers to achieve root-level access on other servers connected within a network. The flaws primarily reside in how the popular virtual private network (VPN) alternative handles SSH network connection forwarding, a process that operates with root privileges.

For exploitation to occur, an attacker must first successfully compromise a device running the vulnerable Tailscale SSH server. Once an initial foothold is established, the attacker could then leverage these flaws to reach services and files on other networked servers that should only be accessible by the root user, significantly escalating their privileges and lateral movement capabilities.

Tailscale, known for its mesh VPN capabilities that simplify secure network access, has urged all users to update their installations to version 1.104.4 without delay. Applying the patch is essential to mitigate the risk of privilege escalation and unauthorised access across interconnected systems. The company routinely releases updates to enhance security and address identified vulnerabilities.

This incident underscores the importance of promptly applying security patches and maintaining a strong security posture, even for tools designed to enhance network security.