Tailscale SSH: Findings and fixes

Tailscale disclosed and fixed several security issues in Tailscale SSH, following a researcher’s “Tailworm” report, with patches released in version 1.104.4. The vulnerabilities primarily involved privilege enforcement after authorized SSH connections were established, potentially allowing a user with existing, policy-approved access to perform actions beyond the permissions of the configured local account, including through SSH forwarding. Tailscale stated that the flaws did not allow unauthenticated access, arbitrary connections to SSH servers, or self-replicating worm behavior; exploitation required a prior foothold on an authorized tailnet device and remained limited by existing tailnet policies. The update also fixes three bugs involving Tailscale Serve and Funnel, while two additional reported behaviors were characterized as intended configurations, and a separate issue in the unreleased Conn25 app connector affects no current stable app connectors. Tailscale published four security bulletins, recommends that Tailscale SSH users upgrade promptly and review SSH policies and use of additional authentication checks for sensitive systems, and says it has added broader architectural safeguards while continuing to welcome independent security research.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.