Critical · published November 23, 2022
🚨 A malicious website can hijack your Tailscale daemon and execute code remotely — all without raising an alarm! 🔥 Think of the Tailscale daemon as a delivery service that only listens to calls made from your own home. Now, imagine if a sneaky website could pretend to be you and change your delivery address to send packages (or malicious code) to a different location entirely — a catastrophic mix-up! An attacker could take control of the Tailscale daemon, effectively allowing them to run any code they desire on your machine. This could lead to data breaches, unauthorized access to sensitive information, or even complete system compromise. The stakes are high, and the consequences could be absolutely devastating!
Think of the Tailscale daemon as a delivery service that only listens to calls made from your own home. Now, imagine if a sneaky website could pretend to be you and change your delivery address to send packages (or malicious code) to a different location entirely — a catastrophic mix-up! This vulnerability arises from the local API of the Tailscale Windows client being bound to a TCP socket without proper Host header verification, allowing an attacker-controlled website to manipulate API requests and redirect the Tailscale daemon's configuration.
An attacker could take control of the Tailscale daemon, effectively allowing them to run any code they desire on your machine. This could lead to data breaches, unauthorized access to sensitive information, or even complete system compromise. The stakes are high, and the consequences could be absolutely devastating! To protect yourself, immediately upgrade your Tailscale client to version v1.32.3 or later. Additionally, review your security settings to ensure no unauthorized configurations have been made. Regularly audit your systems to safeguard against future vulnerabilities. You've got this! Follow these steps, and your Tailscale setup will be fortified in no time. 🛡️