Tailscale SSH Flaws Enable Root Privilege Escalation Across Tailnet Networks

Tailscale SSH Flaws Enable Root Privilege Escalation Across Tailnet Networks

What Happened — Tailscale’s security team disclosed eleven vulnerabilities (collectively dubbed Tailworm) affecting the Tailscale 1.104.2 SaaS client and the self‑hosted Headscale v0.29.5 control server. The most severe issue resides in the embedded SSH server (running as root) where improper handling of Unix‑socket forwarding (ssh -R / -L) allows an attacker with a single approved device and an SSH policy rule to execute arbitrary code with root privileges, steal enrollment keys, or delete privileged files. Additional flaws let a compromised connector bypass network ACLs, cause denial‑of‑service on the control server, and trigger memory exhaustion in the DERP client. All findings were reproduced on unmodified releases and have been reported to Tailscale for patching.

Why It Matters for Trust & Control Assurance — The SSH flaw directly challenges the control objective of privileged‑access protection; continuous monitoring of privileged service configurations is essential to demonstrate audit‑ready evidence across frameworks.

Who Is Affected — Cloud‑native SaaS providers, enterprises using Tailscale for remote access, and any organization that relies on the embedded SSH server for internal administration.

Recommended Actions —

1. Deploy Tailscale patches as soon as they are released.
2. Review and tighten SSH policy rules; restrict Unix‑socket forwarding to explicitly trusted devices.
3. Enable logging of all SSH session activity and monitor for unexpected root‑level commands.
4. For self‑hosted Headscale deployments, place the control server behind authenticated ingress and enforce rate‑limiting.

Technical Notes —

• Vulnerability class: privilege‑escalation via Unix‑socket forwarding race condition.
• Affected components: Tailscale SSH server, experimental app connectors, Headscale control server, DERP client, and tailscale serve.
• No public CVE identifiers yet; patches are in progress for version 1.104.2 (SaaS) and v0.29.5 (Headscale).

Source: BleepingComputer