(⁠◔⁠‿⁠◔⁠) Are you OK？✨ Thinking...http://tg.okhk.nethttp://tg.okhk.net/posts/11869http://tg.okhk.net/posts/11869Thu, 29 Oct 2026 04:08:07 GMT<div class="tgme_widget_message_forwarded_from accent_color">Forwarded from <a class="tgme_widget_message_forwarded_from_name" href="https://t.me/outvivid/4947" target="_blank" rel="noopener"><span>层叠 - The Cascading</span></a></div><i class="emoji"><b><span class="post-title-source">🔴</span></b></i><span class="post-title-source"> </span><mark class="highlight"><span class="post-title-source">Tailscale</span></mark><span class="post-title-source"> SSH 漏洞或可被用于提权；建议升级至 1.104.4 版本。</span><br /><br />- 主要漏洞是 tailscaled 默认以 root 运行，而 <mark class="highlight">Tailscale</mark> SSH 在转发 socket 的时候可能不会以用户的身份，而是以 root 身份转发 socket。<br />- 这使得非 root 用户能透过 docker.socket 等路径取得 root 权限。<br />- 以及一些其它 DoS/<mark class="highlight">tailscale</mark> serve 权限管理问题等。<br />- 不影响普通 SSH。不会使 <mark class="highlight">Tailscale</mark> 外攻击者提权。<br /><br /><a href="https://tailscale.com/blog/tailscale-ssh-findings-fixes" target="_blank" rel="noopener" title="https://tailscale.com/blog/tailscale-ssh-findings-fixes">https://tailscale.com/blog/tailscale-ssh-findings-fixes</a><br /><br /><a href="/search/result?q=%23Tailscale" title="#Tailscale">#Tailscale</a><a class="tgme_widget_message_link_preview" href="https://tailscale.com/blog/tailscale-ssh-findings-fixes" target="_blank" rel="noopener" title="Tailscale SSH vulnerabilities from the Tailworm report: Findings, response timeline, security bulletins, and fixes in Tailscale v1.104.4."> <div class="link_preview_site_name accent_color">Tailscale</div> <img class="link_preview_image" alt="Tailscale SSH: Findings and fixes" src="/static/https://cdn4.telesco.pe/file/bWFE54VsYzdaP5Wq4WwgrSN3G87ns-T0-4u4FoQ5hFdoI2S3n9-TGA-5PdhfvloPGzQqfq9IaDX9PcuUZFcLX8VELYhgrQPQsRZOtReBJf_LgR9RgB5Lft_4jWViqGb6H3Cj01iujG0T89QFqdCNpdP-IMupTlqN2gVumV-QshihZQpKhLOZA0e3Hxb15iANgiMw5AE2-YHl9XVkzIYL-FwHgwCvSTo-CfwQraRCm7xVsHORZGKC8ncsQSuUF-DrP8n6_LU7LztSd8siZTxNb0efssl6aoByOhhXDJWN6edXle4et8NpZkGrJ2Ff8Y9IHYyMRugmQjIaYTtmU52bpw.jpg" width="1200" height="630" loading="eager" /> <div class="link_preview_title"><mark class="highlight">Tailscale</mark> SSH: Findings and fixes</div> <div class="link_preview_description"><mark class="highlight">Tailscale</mark> SSH vulnerabilities from the Tailworm report: Findings, response timeline, security bulletins, and fixes in <mark class="highlight">Tailscale</mark> v1.104.4.</div> </a>