Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
Source SecurityWeek
Rated High by Threat Radar's AI analysis
Data as of 27 Oct 2026, 18:56 UTC
What to do
AI-suggested
Tailscale is releasing official patches to address these vulnerabilities, with fixes already committed to public repositories and a patched client expected imminently. Until the patch is released, organizations should review and tighten SSH access policies, specifically disabling SSH forwarding where it is not required, as this mitigates several of the critical issues. No recommendation to disable Tailscale SSH entirely has been made.
Description
Tailscale SSH suffers from multiple privilege escalation vulnerabilities collectively called 'Tailworm,' disclosed publicly before patches were available. These flaws allow an attacker with access to a compromised device to escalate privileges on any server reachable via Tailscale SSH, potentially gaining root access and stealing keys to add rogue devices. The vulnerabilities enable wormable attacks that can propagate rapidly across servers without user interaction. Tailscale is preparing patches, with fixes already committed to public repositories but not yet released in a numbered version. Until patched, disabling SSH forwarding where not needed mitigates several serious issues.