Peaked at #1 Now #1
Tailscale flaws disclosed
Researcher Erica Windisch skipped coordinated disclosure and published 11 unpatched Tailscale flaws, including SSH race-condition privilege escalation.
Key points
- Researcher Erica Windisch skipped coordinated vulnerability disclosure and published 11 unpatched Tailscale flaws.
- In her lab, Tailscale SSH race conditions let one hacked device get root on other servers and add a rogue node.
- Tailscale VP of Engineering Mike Shaver replied on Reddit that, based on current assessment, Tailscale is not recommending that everyone disable it.
Key points and the reaction summary are written by AI from the posts on this page. Check the original post. How we use AI
Original post
Top replies on X
Sign in to see 5 top replies from X
From @IntCyberDigest, @IntCyberDigest, @BradSanJuan and others. Spam removed, with English and Chinese translations.
Discussion 0
Sign up Sign in to join the discussion
No comments yet. Start the conversation.