A new report called Tailworm claims that a single hacked device on a Tailscale network can gain root access on other servers it reaches. Two conditions apply: Tailscale SSH must allow port forwarding, and the attacker must already control a device the network’s access rules permit to connect to the target.
First seen on thecyberexpress.com
Jump to article: thecyberexpress.com/tailworm-tailscale-ssh-flaws-root-access/
