Tailscale has released version 1.104.4 to fix security flaws in its built-in SSH server. The vulnerabilities exist in how the Tailscale background process forwards network connections with root privileges. An attacker who compromises a single Tailscale device could potentially access services and files on other servers that should only be accessible to the root user, bypassing intended access controls. Users are urged to update to version 1.104.4 or later.

What should defenders do?

Users should update Tailscale to version 1.104.4 or later immediately. The update patches the SSH server vulnerabilities related to network connection forwarding with root privileges.

highcybersecurity

Tailscale Patches Privilege Escalation Flaws in Built-in SSH Server

Version 1.104.4 addresses vulnerabilities that could allow root-level access across Tailscale network nodes

Cyber.TechVoidPublished about 1 hour agoUpdated less than a minute ago1 min read

Tailscale Patches Privilege Escalation Flaws in Built-in SSH Server

Key Takeaways

Tailscale has released version 1.104.4 to patch security flaws in its built-in SSH server.
The vulnerabilities exist in how the Tailscale background process forwards network connections with root privileges.
An attacker who compromises a single Tailscale device could potentially access services and files on other servers that should only be accessible to the root user.

Related Security News

highVulnerability

Tailscale warns of SSH flaws allowing root privilege escalation

The Tailscale security team has disclosed a series of security vulnerabilities in the SSH component of its networking software. The flaws could allow attackers to steal credentials, cause denial of service through server crashes, and escalate to root privileges on affected systems. Patches are in development and users are advised to update to the latest version.

BleepingComputer1 day ago1 min read