Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

AI Summary

Tailscale released version 1.104.4 to address flaws in its built-in SSH server — dubbed 'Tailworm' — that could allow an attacker on a compromised node to pivot and gain root-level access to other servers in the Tailnet. The vulnerability stems from how Tailscale SSH forwards network connections using the root-privileged background process, and was disclosed publicly before patches were ready, forcing an emergency response from the Tailscale team.

Read full article → https://thehackernews.com/2026/10/tailscale-patche…

Relevance score: 76.0/100

# More from October 29

1
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns The Hacker News
2
Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win The Hacker News
3
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges The Hacker News
4
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws The Hacker News
5
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch The Hacker News
6
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers The Hacker News
7
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network The Hacker News
8
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass The Hacker News
10
Chrome and Firefox Updates Patch Over 200 Vulnerabilities SecurityWeek