Tailscale Patches Critical Tailworm Vulnerabilities in Version 1.104.4

Administrators managing Tailscale mesh-virtual private networks must download version 1.104.4 or newer immediately following the disclosure of critical security vulnerabilities that allow authenticated attackers to escalate privileges and move laterally across networks. Tailscale released an advisory detailing the flaws on Wednesday, heise online reported, after receiving an emergency security report from researcher Erica Windisch over the weekend. Over the past several days, developer and security teams addressed issues requiring urgent attention, examined the associated code, and developed and tested fixes. Tailscale noted that concerns regarding Tailscale SSH appeared on social media last Friday, and the research report arrived at the company on Saturday morning, with developers already investigating the problems when the disclosure was published two hours after arriving at the company.

Network-Level Risks and the “Tailworm” Advisory

The security flaws, tracked under the collective descriptor “Tailworm,” threaten the core architecture of tailnets where connected devices communicate peer-to-peer using the WireGuard protocol. Because Tailscale SSH facilitates encrypted terminal access without traditional key management—relying instead on WireGuard for authentication and built-in access control lists—a compromised session can allow malicious actors to perform operations beyond their authorized Unix user permissions. Attackers require prior access to an authorized device within the tailnet to exploit these mechanics, meaning the vulnerabilities serve as a vehicle for lateral movement rather than initial entry. SSH servers, such as OpenSSH or Tailscale SSH, require elevated privileges for certain tasks, such as starting sessions for different Unix user accounts, and privilege enforcement was not correctly maintained under certain conditions, including during SSH forwarding. Tailscale pointed out that the vulnerability name “Tailworm” implies a worm-like propagation, though the description merely covers classic lateral movement within the network.

Specific Components Affected and Patch Availability

The advisory covers multiple components, with five specific vulnerabilities affecting Tailscale Serve and Funnel. Among those five, three turned out to be software bugs addressed directly in version 1.104.4, while two represented expected system behaviors. An additional vulnerability identified in the analysis involved Conn25, an app-connector that remains in development and has not been publicly released. Alongside issuing the software update, developers implemented new architectural guardrails to block similar attack vectors in the future. Tailscale published four separate security advisories, numbered TS-2026-014 through TS-2026-017, detailing the affected components and mitigation steps.