Tailscale is working to patch nearly a dozen security vulnerabilities in its mesh VPN software, including critical flaws in its SSH server that could allow authorized attackers to gain root-level code execution, steal credentials, and crash servers.
The vulnerabilities, collectively named Tailworm, were discovered by Cyberdione Labs during a security audit of Tailscale 1.104.2 and the self-hosted headscale v0.29.5 control server. All 11 flaws were verified on unmodified, released software.
“All findings were verified by reproduction in a lab environment on unmodified, released software (tailscale v1.104.2, headscale v0.29.5),” said Erica Windisch, founder of Cyberdione Labs. “It is the opinion of the researchers that rapid awareness of these flaws will expediate remediation across impacted devices. These vulnerabilities were not introduced by the researchers, but were discovered, and discovered with low effort.”
The most critical issue lies in Tailscale's embedded SSH server, which runs as root. By exploiting Unix-socket forwarding mechanisms, an attacker with approved device access and an SSH policy rule could gain root execution on target servers, capture enrollment keys, or arbitrarily delete files.
Other vulnerabilities affect Tailscale's app connectors, headscale control server, DERP relay client, and the Tailscale serve feature, potentially enabling credential theft, denial-of-service attacks, or bypass of application authorization.
On Monday, the Tailscale team confirmed receipt of the report and said patches would be available by the end of Tuesday, October 27. “These are serious security issues, and we're treating them accordingly,” the company said. “Exploitation depends on the permissions granted to the connecting user or device, the system's configuration, and other conditions. We're continuing to verify the full scope of the findings and which configurations may be affected.”
Despite the severity, Tailscale is not recommending users disable the SSH feature. “If you want to jump to the most important part, based on our current assessment, we're not recommending that everyone disable Tailscale SSH,” said Mike Shaver, VP of Engineering at Tailscale.
Instead, the company recommends reviewing SSH access policies, limiting access to necessary users and devices, and disabling SSH forwarding if not needed by setting the environment variable TS_SSH_DISABLE_FORWARDING=1. Users are urged to apply the patched client release as soon as it is available.
Analysis
Why This Matters
- Tailscale is widely used by organizations and individuals for secure remote access; these flaws could allow privileged attackers to move laterally within a tailnet and access sensitive systems.
- The vulnerabilities include root privilege escalation, credential theft, and denial-of-service, representing a significant risk to any deployed Tailscale environment.
- With patches expected within hours, the speed of remediation will determine how quickly users can close the window of exposure.
Background
Tailscale provides a software-defined mesh VPN built on WireGuard, allowing users to connect devices, servers, and cloud instances into a single encrypted network called a tailnet. The company offers both a SaaS-managed service and an open-source self-hosted control server called headscale. The vulnerabilities were identified by Cyberdione Labs, a security research firm, and reported to Tailscale on a timeline that has not been disclosed.
Key Perspectives
Tailscale: Says the flaws are serious but does not recommend disabling Tailscale SSH, instead urging users to apply mitigations such as disabling SSH forwarding and reviewing access policies while a patch is prepared. “These are serious security issues, and we're treating them accordingly,” the company said.
Cyberdione Labs: The research firm that discovered the vulnerabilities advocates for rapid public awareness of the flaws, stating that “rapid awareness of these flaws will expediate remediation across impacted devices.” Founder Erica Windisch noted the vulnerabilities were discovered with low effort and were not introduced by the researchers.
What to Watch
- Release of the patched Tailscale client, expected by the end of October 27, and how quickly users apply the update.
- Whether any exploitation of the vulnerabilities is reported in the wild before patches are widely deployed.
- Potential further disclosures from Tailscale about the full scope of affected configurations and any additional mitigations.
Checked
12 claims in this story checked against 1 source: 9 supported.
Show each claim
- SupportedTailscale warns that serious SSH flaws could allow root privilege escalation.BleepingComputer: “The most critical issue is in Tailscale's SSH server and could let authorized attackers gain code execution with root privileges through Unix-socket forwarding on a targeted tailnet.”
- SupportedAn audit discovered 11 vulnerabilities, and patches were expected by October 27.BleepingComputer: “Cyberdione Labs discovered 11 flaws (collectively known as Tailworm) that still lack patches during a security audit of Tailscale 1.104.2 and the self-hosted headscale v0.29.5 control server. [...] The Tailscale devs aim to push a new version that fixes these issues by the end of Tuesday, October 27”
- SupportedTailscale is working to patch almost a dozen vulnerabilities in its mesh VPN software.BleepingComputer: “The Tailscale security team is working to patch almost a dozen security vulnerabilities”
- Partly supportedThe SSH flaws could enable root execution, credential theft and server crashes.BleepingComputer: “Tailscale SSH (tailscaled's embedded SSH server, running as root) [...] Root execution on target servers; capture of enrollment keys; arbitrary root-file deletion”
- SupportedThe 11 flaws were named Tailworm and found by Cyberdione Labs in an audit of Tailscale 1.104.2 and headscale v0.29.5.BleepingComputer: “Cyberdione Labs discovered 11 flaws (collectively known as Tailworm) that still lack patches during a security audit of Tailscale 1.104.2 and the self-hosted headscale v0.29.5 control server.”
- SupportedErica Windisch said: “All findings were verified by reproduction in a lab environment on unmodified, released software (tailscale v1.104.2, headscale v0.29.5),” and gave the quoted statement about awareness, remediation and discovery effort.BleepingComputer: ““All findings were verified by reproduction in a lab environment on unmodified, released software (tailscale v1.104.2, headscale v0.29.5),” said Erica Windisch, founder of Cyberdione Labs, who reported the flaws to Tailscale and publicly released the details. “It is the opinion of the researchers that rapid awareness of these flaws will expediate remediation across impacted devices. These vulnerabilities were not introduced by the researchers, but were discovered, and discovered with low effort.””
- Partly supportedThe SSH issue involves Unix-socket forwarding and could let an authorized attacker with an approved device and SSH policy access gain root execution, capture enrollment keys or delete files.BleepingComputer: “One approved device + one SSH policy rule (forwarding granted automatically on headscale; per-rule on SaaS) Root execution on target servers; capture of enrollment keys; arbitrary root-file deletion”
- SupportedOther vulnerabilities affect app connectors, headscale, the DERP client and Tailscale Serve, with potential credential theft, denial of service or authorization bypass.BleepingComputer: “Tailscale app connectors [...] Reach cloud metadata (credential theft) [...] headscale control server [...] Control-server crash loop [...] Tailscale DERP client [...] memory exhaustion [...] tailscale serve [...] minority of requests bypass app authz”
- Partly supportedOn Monday, Tailscale confirmed receipt of the report and said patches would be available by the end of Tuesday, October 27.BleepingComputer: “On Monday, the Tailscale team said it received Cyberdione Labs' report and was working on patches to address these security issues by the end of today. [...] The Tailscale devs aim to push a new version that fixes these issues by the end of Tuesday, October 27”
- SupportedTailscale said: “These are serious security issues, and we're treating them accordingly,” and said exploitation depends on permissions, configuration and other conditions while it continued checking scope.BleepingComputer: ““These are serious security issues, and we're treating them accordingly. Exploitation depends on the permissions granted to the connecting user or device, the system's configuration, and other conditions. We're continuing to verify the full scope of the findings and which configurations may be affected.””
- SupportedTailscale is not recommending that everyone disable Tailscale SSH; Mike Shaver said: “If you want to jump to the most important part, based on our current assessment, we're not recommending that everyone disable Tailscale SSH,”BleepingComputer: ““If you want to jump to the most important part, based on our current assessment, we're not recommending that everyone disable Tailscale SSH,” said Mike Shaver, VP of Engineering at Tailscale.”
- SupportedTailscale recommends reviewing SSH access policies, limiting access to necessary users and devices, and disabling forwarding with TS_SSH_DISABLE_FORWARDING=1 if it is not needed; users are urged to apply the patched client release when available.BleepingComputer: “Review SSH access policies. Limit access to the users and devices that need it. Disable SSH forwarding if you don't need it. Set TS_SSH_DISABLE_FORWARDING=1 in the tailscaled service environment and restart the service. [...] urged users to prepare to update and “apply the patched Tailscale client release when it becomes available.””
