Tailscale prepares patches for ‘Tailworm’ SSH flaws that could grant root access

BleepingComputer reports Cyberdione Labs found 11 ‘Tailworm’ flaws in Tailscale and headscale, including SSH issues that could let someone already authorized to connect gain root privileges. SecurityWeek says researchers demonstrated attacks across permitted servers in lab tests. As of October 27, Tailscale aimed to release a patched client that day. In the meantime, it advised reviewing SSH access policies and disabling forwarding where unnecessary, rather than disabling Tailscale SSH for everyone.