VulnerabilityBSI CERT-Bund
Tailscale: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Tailscale ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-42200 linked CVEs
Open advisory with all CVEs
More on Tailscale
Other advisories
- Highbsi:WID-SEC-2026-4220Tailscale: Mehrere Schwachstellen
- Highpwn_watch:tailscale-tailworm-ssh-forwarding-privescTailworm: researcher drops 11 Tailscale and headscale flaws; Tailscale 1.104.4 fixes the SSH forwarding root escalation
- Not ratedosv:CVE-2026-598009Router < 0.4.44 - OS Command Injection via sudoPassword Parameter in Tailscale Install Endpoint
- Not ratedosv:CVE-2026-57999luci-app-tailscale-community - Command Injection via tailscale.do_login RPC
- HighCVE-2026-57999luci-app-tailscale-community enthält eine Schwachstelle für Befehlseinschleusung in der RPC-Methode tailscale.
- HighCVE-2026-57999luci-app-tailscale-community enthält eine Schwachstelle für Befehlseinschleusung in der RPC-Methode tailscale.
- MediumCVE-2026-41913OpenClaw: Concurrent async auth attempts can bypass the intended shared-secret rate-limit budget on Tailscale-capable paths
- Not ratedosv:openSUSE-SU-2026:10456-1tailscale-1.96.4-1.1 on GA media
Other news entries
- Tailscale SSH: „Tailworm“-Lücke führt zu Root-Rechten und KompromittierungNewsheise Security
- Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other ServersNewsThe Hacker News
- Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ FlawsNewsSecurityWeek
- Tailscale warns of SSH flaws allowing root privilege escalationNewsBleepingComputer
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other ServersNewsThe Hacker News
- Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went OfflineNewsThe Hacker News
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4220
ID