“Tailworm”: 11 Unpatched Tailscale SSH and Networking Flaws Published Without Coordinated Disclosure

Scope: Tailscale SSH, serve, app connector, and DERP relay client (tested against Tailscale 1.104.2); headscale 0.29.5 self-hosted server

Severity: Amber

Security researcher Erica Windisch of Cyberdione Labs published a report called Tailworm on October 25, 2026, detailing 11 unpatched vulnerabilities across Tailscale’s SSH implementation, its serve and app connector features, the DERP relay client, and headscale, the open-source self-hosted alternative to Tailscale’s coordination server. The disclosure did not follow Tailscale’s normal coordinated process, meaning the company had no advance warning before the findings went public. The most severe issue is a race condition in how Tailscale SSH handles Unix socket forwarding: when triggered through local or remote socket forwarding commands, the forwarded connection executes with root privileges and can reach root-only sockets, effectively letting a single compromised device on a Tailscale network pivot to root access on other connected servers. As of this writing, Tailscale has published no security bulletin, no CVE identifier, and no fixed version addressing these specific findings, though the company has a track record of fixing related SSH and socket-handling issues earlier in 2026. Because no patch exists, the only available response is configuration change rather than updating software. Organisations running Tailscale SSH must review and tighten SSH access rules today, remove any tailscale serve configuration that forwards to a Unix socket, and monitor Tailscale’s bulletins page for an official response rather than disabling Tailscale SSH outright, since tightening access controls addresses the immediate risk without losing the feature entirely.

The Uganda National CERT and Coordination Center (CERT.UG/CC) encourages users and administrators to review the recommendations and apply the necessary updates.