On October 25, 2026, security researcher Erica Windisch of Cyberdione Labs published "Tailworm": 11 vulnerabilities in Tailscale and the open-source headscale control server, six rated high severity. The details went public with no coordinated disclosure and no fix available, and the report reached Hacker News the same day. Tailscale shipped version 1.104.4 on October 28. If you run Tailscale on servers, here's what matters.
Table of Contents
What Happened
- Oct 22–24: the researcher tests Tailscale 1.104.2 and headscale 0.29.5.
- Oct 25: the Tailworm report is published without advance notice to the vendors.
- Oct 26: Tailscale publishes security bulletins TS-2026-014 to TS-2026-017.
- Oct 28: Tailscale 1.104.4 is released, fixing the SSH and Serve issues.
The Flaws in Plain English
- Tailscale SSH (5 findings). Tailscale's built-in SSH server runs as root. A device that is already authorised by an SSH policy rule could abuse race conditions in Unix-socket forwarding to get root code execution on the target server, capture enrollment keys or delete files. This is the most serious finding.
- Tailscale Serve (5 findings). Issues affecting setups that forward traffic to Unix sockets.
- App connectors (1 finding). A misconfigured connector could expose cloud metadata credentials.
- headscale. An unauthenticated denial-of-service against the self-hosted control server, plus client memory exhaustion via malicious DERP relay responses.
Who Is Actually Exposed
The serious findings need an attacker who is already inside your tailnet with specific permissions. They aren't open to anyone on the internet.
Exposed
- Tailscale SSH users with SSH policy rules
- Serve operators forwarding to Unix sockets
- App connector users
- Self-hosted headscale admins
Largely not exposed
- Personal users connecting a few devices without Tailscale SSH or Serve
- Consumer VPN apps like CarrotVPN, which don't use Tailscale
What to Do Now
- Update every node to Tailscale 1.104.4 or later.
- If you can't update right away, set
TS_SSH_DISABLE_FORWARDING=1in the tailscaled environment to turn off the risky SSH forwarding. - Tighten SSH rules into narrow per-device-pair grants instead of broad rules.
- headscale admins: restrict network exposure of the control server until all fixes land. At the time of writing, the app connector fix and part of the headscale finding were still open.
- Review logs for unexpected SSH sessions since October 25.
The Disclosure Controversy
The usual practice is coordinated disclosure: the vendor gets weeks or months to ship a fix before details are published. Publishing first gives attackers a head start. Critics argue that's exactly what happened here; the researcher's supporters argue it forced a fast fix. Either way, Tailscale's three-day turnaround was quick. For how VPN-type software gets attacked more broadly, see is a VPN hackable?
Frequently Asked Questions
What is Tailworm?
Tailworm is a set of 11 vulnerabilities in Tailscale and headscale published on October 25, 2026 by Erica Windisch of Cyberdione Labs, without coordinated disclosure. The most serious allows root code execution via Tailscale SSH.
Which Tailscale version fixes Tailworm?
Tailscale 1.104.4, released on October 28, 2026, fixes the SSH and Serve issues. Some app connector and headscale fixes were still pending at the time of writing.
Am I affected if I use Tailscale at home?
Your risk is low if you don't use Tailscale SSH, Serve with Unix sockets, app connectors or a self-hosted headscale server. Updating is still recommended.
Sources
- Brandefense: Tailworm: Tailscale Flaws and Who Is Exposed
- IT-Connect: Tailworm: 11 unpatched Tailscale flaws including root access via Tailscale SSH
- SecurityIT: Tailscale Rushes Patches After Uncoordinated Disclosure of Tailworm Flaws
Simple, Private Browsing
Need a VPN for privacy rather than a private network? CarrotVPN is a free WireGuard® app for Android, no account needed.
Download CarrotVPN Free