Expired50% confidenceFactExact time
The vulnerability can allow a restricted user to escalate privileges and gain root superuser access (vertical privilege escalation to UID 0) on the target host.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/19/2026
First Seen
Valid until: 10/17/2026(expired)
Sources
Tailscale SSH高危漏洞TS-2026-009：普通用户可越权获取root权限
Related Claims
UnverifiedThis vulnerability affects all users who rely on Tailscale ACLs (Access Control Lists) for permission management.67% similarUnverifiedA prerequisite for exploiting this vulnerability is that the attacker already has a certain level of Tailscale network access, meaning they are already a legitimate but restricted member of the network.66% similarUnverified在 Linux 系统中 root（UID 0）能绕过几乎所有访问控制，包括读写任意文件、加载内核模块66% similarUnverifiedLimitations of a pure frontend architecture include the inability to sync data across devices, the inability to implement user account systems, difficulty in securely handling payments and authentication, and data loss when the browser cache is cleared.63% similarUnverified攻击者获取访问权限后可能立即绑定自己的2FA设备将原账号主人锁出，此操作被称为账号接管（Account Takeover，ATO）62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/556621API
curl https://kongchang.com/api/v1/knowledge/claims/556621MCP
get_claim(id=556621)