Tailscale is patching SSH flaws that can exceed local user permissions
Tailscale says some authorized SSH sessions may gain elevated privileges; it is testing fixes and recommends disabling forwarding where it is not needed.
By RuntimeWire Staff · Published
Primary source: tailscale.com
Why it matters
Tailscale SSH governs access to servers, so privilege boundaries after a user connects are central to the product's security promise. Tailscale's planned advisory should define which setups need remediation.
Tailscale said on October 26th that vulnerabilities in Tailscale SSH could let some already-authorized users exceed the permissions of their configured local accounts, including potentially gaining elevated privileges. Tailscale has implemented fixes for most of the issues it identified and is testing a patched client, while still determining which configurations are affected.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.