Tailworm: New Tailscale SSH Flaws Enable Rapid Root Escalation Across Trusted Devices
A security researcher has published a report — dubbed "Tailworm" — that describes multiple vulnerabilities in Tailscale’s SSH implementation and related components which, in lab tests, allowed an attacker on one compromised device to rapidly gain root on other machines across a private Tailscale mesh. The findings raise questions about how privilege is handled inside tailscaled and call attention to administrative rules and configurations that can turn a single foothold…