Expired50% confidenceFactExact time
Tailscale SSH has a severe root privilege escalation vulnerability that allows an attacker to gain full root-level control over the target machine.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/16/2026
First Seen
Valid until: 10/14/2026(expired)
Sources
Related Claims
UnverifiedA prerequisite for exploiting this vulnerability is that the attacker already has a certain level of Tailscale network access, meaning they are already a legitimate but restricted member of the network.67% similarUnverified防御SSH暴力破解的有效手段包括禁用密码登录仅允许公钥认证、更改默认端口、部署fail2ban，以及通过VPN消除公网暴露65% similarUnverified即使是 tailnet 中的唯一用户也可能受该漏洞影响，因为链式漏洞可组合利用构成完整攻击链65% similarUnverified完善的 SSH 访问防护应结合网络层加密隧道、SSH 密钥认证、MFA 多因素验证和最小权限原则等多层防御62% similarUnverifiedThe TS-2026-009 vulnerability stems from insecure argument handling logic in Tailscale SSH when processing command-line arguments.60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/535501API
curl https://kongchang.com/api/v1/knowledge/claims/535501MCP
get_claim(id=535501)