# Tailscale fixes SSH forwarding flaws exposing root-only services

_Published Wednesday, October 28, 2026 at 4:08 AM EDT · Security, Infrastructure · Latest · Tier 2 — Notable_

![Tailscale fixes SSH forwarding flaws exposing root-only services — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4t7YUY-idhgGJFpEuulM5zELQR4QNB-UKmsh7cyB5cdMH4AU_zumf3K27WBWgAw6ra28TvALm5fFeLrV_1wHJXeYy3azE1TcblP-1JSCPLF3mq-WKjUOXy3K-pfjhHtiwGkCoYhxfEMZGielHz2Bit6mLoNlnElmauP0RNcbXelNkAHIWI4s92qrymUQ/s1700-nu-rw-lo-l85-e365/tailscale-patches.jpg)

Tailscale has released version 1.104.4 to fix SSH forwarding flaws that could let an attacker controlling an authorized device reach root-only services on another server, The Hacker News reported. Exploitation requires an SSH connection permitted by network policy, with forwarding allowed.

The fix makes the server forward connections as the logged-in user rather than root and rely on operating-system file permissions. Researcher Erica Windisch obtained a root shell through the Docker control socket in laboratory tests; Tailscale describes the exposure as access to privileged sockets.

Administrators unable to update can disable SSH forwarding through the service environment. Tailscale's check mode, which requires a fresh sign-in, does not block flaws exploited within an approved session.

## Sources

- [The Hacker News](https://thehackernews.com/2026/10/tailscale-patches-ssh-flaws-that-could.html)

---
Canonical: https://techandbusiness.org/newswire/5kMT60pWhPK8xbE88TukYH
Published: 2026-10-28T08:08:08.217Z
Story chronology: 2026-10-28T06:20:37.000Z
Retrieved: 2026-10-28T10:44:30.031Z
Publisher: Tech & Business (techandbusiness.org)