Post

as long as they cannot join the polycule tailnet without being in the polycule it’s all gucci

i noticed the other day u still have access to a few of my machines ^.^

oh same but i have ACLs that wall off my prod network from my personal devices, and if this relates to an ACL bypass (which is a form of privilege escalation after all) i'm directly impacted

"oh i've not had to worry much about the last couple vulns because - while they're catastrophic - they're all for products i don't use much or at all, or don't expose" the vulnerability coming for the product that holds my entire internal network together:

It's not horrific

Erica Windisch@ewindisch.ontological.observer

This does *not* impact all tailnet devices. Attacker must be on the tailnet. Systems must be in a non-default but widely deployed and supported configuration. Impact includes systems using headscale.