Tailscale patches SSH flaws enabling lateral movement inside tailnets
Fixes shipped in Tailscale v1.104.4; abuse still requires a device the tailnet policy already allows to use SSH.
55
Vendor
Tailscale
- Mentions · 7d6
- Mentions · 30d9
- All mentions13
- First seenSep 3, 2026
- Last mentioned4d ago
Timeline
13 articles · newest firstTailscale 1.104.4 fixes SSH flaws reaching root-only sockets
A policy-permitted SSH session could swap socket paths and reach Docker or the local API; no real attacks are reported.
64
Tailscale investigating Tailscale SSH privilege-escalation flaws
Authorized Tailscale SSH users may exceed their local-user permissions; a patched client is targeted for October 27.
66
Tailscale prepares client fix after uncoordinated Tailworm disclosure
Six high-severity findings in client 1.104.2 and headscale 0.29.5 can yield root via SSH forwarding; no exploitation is reported.
72
Unpatched Tailscale SSH flaws can give authorized users root
Cyberdione Labs detailed 11 Tailworm issues in Tailscale 1.104.2 and headscale v0.29.5; patches were expected October 27.
70
Tailscale SSH flaws can yield root on connected servers
Lab tests on Tailscale 1.104.2 and headscale 0.29.5 showed root via privileged socket forwarding; no fixes yet.
66
Unpatched Tailscale SSH flaws can yield root from one compromised device
Lab tests on Tailscale 1.104.2 and headscale 0.29.5 found no CVE, bulletin, or fix as of October 25.
64
Researcher reports Tailscale SSH flaws that can yield root across servers
Eleven unconfirmed findings in tailscale 1.104.2 and headscale 0.29.5 have no CVE, bulletin, or fix.
66
web-edit 0.1a0
Simon Willison released web-edit 0.1a0, a Tailscale file editor that keeps credentials out of the LLM.
18
Kothamine malware uses Tailscale’s tailcat to evade network detection
Malwarebytes details Kothamine, a Windows RAT spread via npm that tunnels commands through Tailscale tailcat.
67
llm-keys-ui 0.1
Simon Willison released llm-keys-ui 0.1, a plugin providing a web UI to store API keys on machines without pasting them into agent sessions.
15
AI labs want in-house auditors — but maybe they should shut the front door first
Security experts argue AI labs should prioritize agent sandboxing, monitoring, and network security basics over relying on third-party audits.
48
Stop Telling People Not To Click Links
Tailscale CEO argues link-clicking is not the problem; deploying phishing-resistant authentication like passkeys and WebAuthn eliminates entire attack classes.
15
Appears with
- Cyberdione Labsorganization · 7
- Tailscale SSHproduct · 7
- headscaleproduct · 6
- OpenAIvendor · 2
- Tailscaleproduct · 2
- Codexproduct · 2
- Oktavendor · 1
- tailscaledproduct · 1
- ChatGPTproduct · 1
- tailcatproduct · 1
- Windowsproduct · 1
- Simon Willisonorganization · 1
- Entraproduct · 1
- Claudeproduct · 1
- Luta Securityvendor · 1
- Kothamine Agentmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.