search
Headscale
Trends
- 1Report claims 11 severe security flaws in Tailscale●Explore the critical Tailscale Tailworm vulnerability report detailing 11 severe security flaws in Tailscale and headsca
A new report dubbed 'Tailworm' describes eleven severe vulnerabilities in Tailscale and its open-source alternative Headscale, reportedly including flaws that allow attackers to gain root access. Security communities are circulating the findings, and users of the popular mesh VPN are urged to review the report and apply updates or mitigations while awaiting official responses.
- 2Unpatched Tailscale SSH flaw lets lateral root access spread across networks●🤖 Unpatched Tailscale SSH privesc: a foothold on one tailnet device can yield root on every server its ACLs allow, no ke
Security researchers at Cyberdione Labs, in a project called Tailworm, report an unpatched privilege escalation in Tailscale SSH: compromising a single device on a tailnet can yield root access on every server its access-control rules permit, without needing SSH keys. They tested Tailscale 1.104.2 with Headscale 0.29.5, finding no CVE or fix so far, with only strict per-pair ACLs stopping the spread in their lab.