Post

The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more.

bleepingcomputer.comTailscale warns of SSH flaws allowing root privilege escalationThe Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more.

4 reposts16 likes

The mitigation worth doing today: set TS_SSH_DISABLE_FORWARDING=1 in the tailscaled environment and restart. It turns off SSH forwarding, behind several of the worst findings, without disabling Tailscale SSH.