NewsThe Hacker News
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
More on Tailscale
Other advisories
- Highpwn_watch:tailscale-tailworm-ssh-forwarding-privescTailworm: researcher drops 11 Tailscale and headscale flaws; Tailscale 1.104.4 fixes the SSH forwarding root escalation
- Not ratedosv:CVE-2026-598009Router < 0.4.44 - OS Command Injection via sudoPassword Parameter in Tailscale Install Endpoint
- HighCVE-2026-57999luci-app-tailscale-community enthält eine Schwachstelle für Befehlseinschleusung in der RPC-Methode tailscale.
- HighCVE-2026-57999luci-app-tailscale-community enthält eine Schwachstelle für Befehlseinschleusung in der RPC-Methode tailscale.
- Not ratedosv:CVE-2026-57999luci-app-tailscale-community - Command Injection via tailscale.do_login RPC
- MediumCVE-2026-41913OpenClaw: Concurrent async auth attempts can bypass the intended shared-secret rate-limit budget on Tailscale-capable paths
- Not ratedosv:openSUSE-SU-2026:10456-1tailscale-1.96.4-1.1 on GA media
- Not ratedosv:GHSA-qwmf-95r9-gx9xDuplicate Advisory: OpenClaw's gateway tokenless Tailscale auth applied to HTTP routes
Other news entries
- Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ FlawsNewsSecurityWeek
- Tailscale warns of SSH flaws allowing root privilege escalationNewsBleepingComputer
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other ServersNewsThe Hacker News
- Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went OfflineNewsThe Hacker News
- Tailscale SSH: „Tailworm“-Lücke führt zu Root-Rechten und KompromittierungNewsheise Security
Source: https://thehackernews.com/2026/10/tailscale-patches-ssh-flaws-that-could.html
ID