Tailscale Officially Confirms Nearly a Dozen SSH and Networking Vulnerabilities, Patches in Progress

Scope: Tailscale SSH, serve, app connector, DERP relay client, and headscale self-hosted server

Severity: Amber

Tailscale’s security team confirmed on October 27, 2026, that it is working to patch almost a dozen security vulnerabilities across its SSH implementation and related networking features, officially acknowledging the findings independent researcher Erica Windisch published without coordinated disclosure in a report called Tailworm last week. The confirmed issues can be exploited to steal credentials, crash servers, and gain root privileges, matching the race condition in Unix socket forwarding we flagged previously, where a compromised device on a Tailscale network could pivot to root access on other connected servers. Unlike last week, when no official response existed at all, Tailscale is now actively developing fixes, though specific patched versions were not all available at time of this advisory. Organisations running Tailscale SSH should continue following the interim mitigations already in place, tightened SSH access rules and no serve configurations forwarding to Unix sockets, while watching Tailscale’s official bulletins page for confirmed fixed versions to apply as they are released.

The Uganda National CERT and Coordination Center (CERT.UG/CC) encourages users and administrators to review the recommendations and apply the necessary updates.