Tailworm – Tailscale Vulnerabilities

Tailworm Researchers note Security Assessment Report — Tailscale v1.104.2 and headscale v0.29.5 High-level summary Executive summary for business readers Findings and verified reproductions Background: the authentication model that findings 1–3 build on Background: recon and enumeration available to an attacker Background: app connectors and the conn25 feature Finding 1 (T3) — ssh -L unix-socket forwarding dials as root (writes to root-only sockets) — Severity: High Finding 2 (T2) — ssh -R unix-