Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

Tailscale fixed critical flaws in its SSH server that allowed attackers with access to a trusted device to escalate privileges and access root-only sockets on other servers. The patch changes forwarding to run as the logged-in user, preventing root-level exploits via socket forwarding.