Erica Windisch publishes report alleging Tailscale SSH forwarding can reach root
Her October 25th assessment says lab tests found five classes of issues across Tailscale and Headscale, including a path from an approved device to root-level access.
By Ryan Merket · Published · Updated
Primary source: Cyberdione Labs Corporation
Why it matters
The report alleges that a session granted access to Tailscale SSH could reach root-level services through forwarding.
Erica Windisch published a security assessment on October 25th alleging that weaknesses in Tailscale's SSH forwarding and other network features could let attackers cross boundaries users expect to protect. The Tailworm report describes five classes of findings, reproduced in lab tests on released software. Those demonstrations show reported behavior in the test environment; they do not establish that customer systems have been compromised.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.