Unpatched Tailscale SSH flaw could let a compromised device gain root access on other servers

According to a security researcher’s report, a compromised device on a Tailscale network could be used to gain root access to other servers that the device is allowed to reach by access rules. The findings are based on laboratory tests; the source says attacks against real networks were not observed. At the time of publication, Tailscale had issued no security bulletin or CVE and had not released a fixed version.