Security · 26 October 2026
UnconfirmedTailscale SSH Flaws Allow Lateral Root Access via Port Forwarding
A researcher demonstrated that a compromised device on a Tailscale network can gain root on other reachable servers when Tailscale SSH port forwarding is enabled, using Tailscale 1.104.2 and headscale 0.29.5 in a three‑day lab test; Tailscale has not issued a bulletin, CVE, or fix yet.
Why it matters
Prioritize adding detection or alternative remote‑access methods for customers using Tailscale SSH port forwarding to mitigate lateral‑movement risk.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 26 Oct →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.