Remote Code Execution

2022-11-2306:29:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

tailscale

remote code execution

vulnerability

host header verification

attacker-controlled coordination server

malicious url responses

executables

smb share.

EPSS

0.003

Percentile

69.6%

JSON

tailscale is vulnerable to remote code execution. The library does not have host header verification, which allows an attacker-controlled coordination server to send malicious URL responses to the client, including pushing executables or installing an SMB share.