Researcher reports Tailscale SSH flaws that can yield root across servers
Original title: Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers From One Compromised Device
Eleven unconfirmed findings in tailscale 1.104.2 and headscale 0.29.5 have no CVE, bulletin, or fix.
Erica Windisch of Cyberdione Labs published the Tailworm report on October 25, 2026, describing 11 issues in Tailscale SSH, serve and app connectors, the DERP client, and headscale. The most serious findings say Tailscale’s root SSH daemon can open or replace Unix sockets, and in the lab an ordinary session read /etc/shadow and reached root on other servers. Tailscale had not confirmed the results and had published no bulletin, CVE, or fixed version. Per-pair access rules stopped the spread in testing.
Unconfirmed: Tailscale has not confirmed the findings, and no CVE or fixed version has been published.
- Tests used tailscale 1.104.2 and headscale 0.29.5 from October 22 to 24.
- Lab SSH forwarding reached root and read /etc/shadow almost instantly.
- The reported hop between devices took under a second and needed no passwords.
- A headscale issue can exhaust memory without an account, the researcher says.
- TS-2026-009, a separate SSH bug, was fixed in Tailscale 1.98.9.
Impact: Root on Tailscale SSH peers and local password-file access
| Product | Affected |
|---|---|
| tailscale | 1.104.2 (version tested) |
| headscale | 0.29.5 (version tested) |
- 1.Limit SSH rules that allow local or remote socket forwarding.
- 2.Use per-pair access rules, which stopped spread in the lab.
- Vendors
- Tailscale
- Products
- Tailscale SSHheadscaletailscaled
- Organizations
- Cyberdione Labs
From the original article
6 min read at cybersecuritynews.com
A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. The report, called Tailworm, was published on October 25, 2026, by security researcher Erica Windisch […]
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.