A security researcher published findings showing that a single hacked device on a Tailscale network can gain root access to other servers it can reach if Tailscale SSH is set up to allow port forwarding.
The vulnerability or weakness
The vulnerability lies in Tailscale SSH, which does not require stolen passwords or keys to establish an SSH session, as it identifies devices based on access rules.
Earlier attacks and coverage
- Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances (2026-10-23)
- New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification (2026-10-22)
- Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers (2026-10-19)
Business impact
This could lead to significant operational disruptions and potential data breaches, affecting the integrity and security of connected systems and services.
Industries affected
This issue impacts a wide range of industries, including technology, finance, healthcare, and any sector relying on networked infrastructure.
Users affected
Organizations and individuals using Tailscale networks are affected, as they may be exposed to unauthorized access and potential data theft.
