Expired50% confidenceFactExact time
A prerequisite for exploiting this vulnerability is that the attacker already has a certain level of Tailscale network access, meaning they are already a legitimate but restricted member of the network.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/19/2026
First Seen
Valid until: 10/17/2026(expired)
Sources
Tailscale SSH高危漏洞TS-2026-009：普通用户可越权获取root权限
Related Claims
Unverified即使是 tailnet 中的唯一用户也可能受该漏洞影响，因为链式漏洞可组合利用构成完整攻击链82% similarUnverified零信任架构能有效遏制攻击者入侵后的横向移动，这是勒索软件蔓延至全网并加密大量数据的关键步骤71% similarUnverified数据解析环节是无线传输协议漏洞的高发地带，攻击者无需预先建立信任关系，仅凭物理接近即可向目标设备发送精心构造的报文70% similarUnverifiedThe cybersecurity domain has long faced an asymmetric offense-defense dilemma: attackers only need to find one vulnerability to succeed, while defenders must plug every vulnerability.70% similarUnverifiedDNS hijacking refers to attackers tampering with DNS resolution results to redirect users' access to legitimate websites toward malicious servers69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/556623API
curl https://kongchang.com/api/v1/knowledge/claims/556623MCP
get_claim(id=556623)