Tailscale faces 11 unpatched flaws in SSH feature, researcher warns
Summary
A researcher has disclosed 11 unpatched vulnerabilities in the VPN service Tailscale, which allows users to access their own computers and servers remotely. During tests conducted from October 22 to 24, Erica Windisch of Cyberdione Labs found that users with approved SSH access could exploit these flaws to gain root access and potentially spread to other devices on the network. Tailscale has acknowledged the report, though VP of Engineering Mike Shaver stated that the vulnerabilities pertain to authorized users rather than unauthenticated attackers. As Tailscale is commonly recommended by platforms like Umbrel for remote access, the company plans to issue a security advisory with necessary patches.
Analysis
Tailscale: Tailscale is a VPN service built on WireGuard that enables users to securely access their own computers and servers from anywhere. In the reported event, a researcher identified 11 unpatched flaws in its SSH feature during lab tests conducted October 22-24. The company has acknowledged the findings and is preparing a security advisory with patches. Mike Shaver: Mike Shaver is VP of Engineering at Tailscale and responded publicly to the vulnerability disclosure on Reddit. He clarified that the issues involve authorized connections rather than unauthenticated attacks and confirmed they affect the service’s own SSH feature specifically. He indicated the company received the report and plans to release patches through a formal advisory. Erica Windisch: Erica Windisch is a researcher at Cyberdione Labs who performed security testing on Tailscale’s latest client. She published a report detailing vulnerabilities that could allow a user with approved access to gain root privileges and spread across networks. Her findings recommend turning off SSH forwarding as a precaution until fixes are issued. VPN Usage: Home server platforms recommend Tailscale for remote access to personal infrastructure including bitcoin nodes. Security Disclosure: Researchers are publishing detailed reports on infrastructure vulnerabilities to prompt vendor responses and patches.
Categories
techcrypto