Tech and AI
A security researcher says one compromised device on a Tailscale network can gain root access on other servers through Tailscale SSH
By Staff Writer | 26 October 2026
The report sets out eleven findings tested in a laboratory. Tailscale says it is working on fixes but has issued no bulletin, CVE or patched version, and is not telling every customer to switch the feature off.
A security researcher has published findings which, she says, allow an attacker who controls one device on a Tailscale private network to gain root access on other servers that device is permitted to reach. The report, called Tailworm, was published on Sunday 25 October by Erica Windisch of Cyberdione Labs, who tested Tailscale version 1.104.2 and headscale version 0.29.5, a self-hosted control server, in a laboratory between 22 and 24 October.
Tailscale SSH does not ask the connecting user for a password or other credential in the usual way. It identifies the connecting device, and an access rule decides whether that device may open a session on the target. The server runs inside a background process with full root privileges. According to the report, when a user is allowed to forward local sockets, that root process opens or replaces them on the user's behalf, and in testing an ordinary session gained root and read the system password file almost at once.
From one device to many
The report then describes a chain in which one compromised device reached root on other servers and enrolled a device of the attacker's own as a trusted server, moving from machine to machine in under a second per step and with no stolen passwords or keys. The first foothold still has to be won another way, such as a vulnerable web application, a poisoned software package, phishing or stolen login details.
the mesh converts one ordinary foothold into fleet-wide privileged access at machine speed
Erica Windisch, security researcher, Cyberdione Labs, in her Tailworm report
Two controls held it back in testing. Access rules written as single pairs of source and destination stopped the spread, and networks with the Tailnet Lock feature enabled blocked the final enrolment step. On Tailscale's hosted service forwarding can be switched off rule by rule, but on headscale 0.29.5 it cannot be switched off at all.
What Tailscale has said
Mike Shaver, Tailscale's vice president of engineering, said in a public post that the company had received the report, had already been examining the same areas with outside security specialists and had found issues it is working to fix. He said it was still establishing which setups are affected and was "not recommending that everyone disable Tailscale SSH".
No other researcher has yet reproduced the findings, and Tailscale has not confirmed the specific technical claims.
Windisch describes the flaw as wormable, a label that has been disputed in public discussion of the report. In July Tailscale fixed a separate SSH flaw, TS-2026-009, in version 1.98.9. Until a fix for these findings arrives, administrators who rely on broad SSH rules have the narrower per-pair rules described in the report as the control that worked in testing.