Tailscale SSH: „Tailworm“-Lücke führt zu Root-Rechten und Kompromittierung
Teaser from the source
Am Wochenende wurden Sicherheitslücken in Tailscale-Software bekannt, die Angreifer etwa zum Ausweiten der Rechte missbrauchen können.
This is the RSS-feed teaser. Read the full article at the original source.
Read at heise SecurityMore on Tailscale
Other advisories
- Not ratedosv:openSUSE-SU-2026:22203-1Security update for tailscale
- Highbsi:WID-SEC-2026-4220Tailscale: Mehrere Schwachstellen
- Highpwn_watch:tailscale-tailworm-ssh-forwarding-privescTailworm: researcher drops 11 Tailscale and headscale flaws; Tailscale 1.104.4 fixes the SSH forwarding root escalation
- Not ratedosv:CVE-2026-598009Router < 0.4.44 - OS Command Injection via sudoPassword Parameter in Tailscale Install Endpoint
- HighCVE-2026-57999luci-app-tailscale-community enthält eine Schwachstelle für Befehlseinschleusung in der RPC-Methode tailscale.
- Not ratedosv:CVE-2026-57999luci-app-tailscale-community - Command Injection via tailscale.do_login RPC
- HighCVE-2026-57999luci-app-tailscale-community enthält eine Schwachstelle für Befehlseinschleusung in der RPC-Methode tailscale.
- MediumCVE-2026-41913OpenClaw: Concurrent async auth attempts can bypass the intended shared-secret rate-limit budget on Tailscale-capable paths
Other news entries
- Tailscale: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other ServersNewsThe Hacker News
- Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ FlawsNewsSecurityWeek
- Tailscale warns of SSH flaws allowing root privilege escalationNewsBleepingComputer
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other ServersNewsThe Hacker News
- Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went OfflineNewsThe Hacker News
Source: https://www.heise.de/news/Tailscale-SSH-Update-stopft-Tailworm-Sicherheitsluecken-11502847.html
ID