Tailscale SSH Tailworm Flaws: Root Escalation and Hardening

On October 25, 2026, Erica Windisch of Cyberdione Labs published Tailworm research identifying eleven security flaws in Tailscale version 1.104.2 and Headscale version 0.29.5. The findings demonstrate that a compromised device within a Tailscale network can escalate privileges to root on destination servers utilizing Tailscale SSH. Tailscale engineering leadership publicly confirmed these serious security issues through an official investigation bulletin, acknowledging the reality of the privilege escalation vulnerabilities and stating that fixes are being addressed.