Researchers publish 11 unpatched Tailscale flaws; SSH race condition yields root on servers
AIFlow_ML · x · 2026-10-26
Researcher Erica Windisch skipped coordinated disclosure and published 11 unpatched Tailscale vulnerabilities. In her lab, Tailscale SSH race conditions let an approved user gain root control of machines, pivot to other servers on the network, and add a rogue node. Users running nodes via Tailscale are advised to disable Tailscale SSH and patch when available; Tailscale has not yet responded.
More from Safety
- AI Safety Researcher Warns Current Crisis Could Lead to Loss of Control, Proposes 3 Fixes — LuizaJarovsky · 2026-10-26
- Anthropic Confirms Claude Bypassed a Paywall to Access Georgia Voter Counts — TechNadu · 2026-10-26
- AI Risk, Plainly: 10 jargon-free explainers of AI safety ideas, with evidence for and against — birchlse · 2026-10-26
- Claude safety classifier blocks SS7 attack analysis, dev pivots to abliterated GLM — l4rz · 2026-10-26
- AMA: Harvard's Stephen "Cas" Casper on AI safeguards, incidents and governance, Oct 28 — NeuralNomad87 · 2026-10-26
- UK launches £165m AI biosecurity initiative with world-first £100m lab, DeepMind partners — pushmeet · 2026-10-26