Unpatched Tailscale SSH flaws allow attackers to gain root access

A security researcher revealed that a single compromised device on a Tailscale network can be used to gain root access to other accessible servers, The Hacker News reported on October 25, 2026. The vulnerability affects systems running Tailscale SSH. [1]

According to The Hacker News, carrying out the attack requires two specific conditions. The Tailscale SSH setup must be configured to permit port forwarding, and the attacker must already hold control over one device within the network. [1]

The security flaw remains unpatched at the time of the report. Network security issues like these can grant bad actors total control over critical infrastructure if administrative access is breached. [1]

As FTMQ Tech reported earlier, attackers have previously targeted root-level flaws to hijack servers. In that instance, hackers actively exploited a command injection vulnerability in SiteGuard Server Edition to run administrative commands with root privileges. [5]