Tailscale Patches Critical SSH Misconfiguration Flaw That Exposed Internal Networks

Tailscale's security advisory TS-2026-009 disclosed a critical vulnerability caused by improper SSH access controls in the platform's default configuration. The flaw allowed unrestricted SSH access across all network nodes with no authentication layer, enabling an attacker who compromised one node to pivot laterally through the entire network. Tailscale addressed the issue by introducing granular ACL enforcement, mandatory network segmentation, and stronger key-based authentication requirements. Security experts recommend auditing vendor defaults, centralizing SSH key management, and using infrastructure-as-code scanning tools to validate configurations. The incident highlights the need for layered security in overlay networks, treating every node as a potential attack vector.