{"type":"bundle","id":"bundle--460b49c8-8991-577a-95fc-bcad319099dc","objects":[{"type":"campaign","spec_version":"2.1","id":"campaign--27854f65-6445-5fd9-a20b-ec1c72095aca","created":"2026-10-28T01:23:48.288Z","modified":"2026-10-28T01:23:48.288Z","name":"Tailworm: Tailscale SSH socket forwarding gave a trusted device root on the servers it could reach (TS-2026-014, fixed in 1.104.4)","description":"Tailworm is the name Cyberdione Labs gave to 11 findings in Tailscale 1.104.2 and headscale 0.29.5, published on 2026-10-25 before any patch existed. The most serious (Tailscale bulletin TS-2026-014) is in Tailscale SSH: Unix socket forwarding (ssh -L and ssh -R) validated paths by name but performed dial, bind and unlink as the root tailscaled process, and a race defeated the path allowlist. A device already permitted by an SSH rule could reach root-only sockets such as the Docker socket or the tailscaled local API and gain root on the target; in the researcher's lab the chain spread host to host in under a second per hop. Tailscale also bulletined SSH session memory exhaustion (TS-2026-015), tailscale serve Unix backends reaching the local API (TS-2026-016) and an HTTP/2 capability bleed across serve mounts (TS-2026-017). Tailscale 1.104.4, tagged 2026-10-27, fixes all four by running forwarding as the session user, bounding session memory and rechecking serve targets on every dial. Headscale control-server findings and part of the app connector finding are not fixed by the client release.","aliases":["Tailworm","Tailscale Tailworm","TS-2026-014","TS-2026-015","TS-2026-016","TS-2026-017","Tailscale SSH root escalation","Tailscale 1.104.4 security fix","Cyberdione Labs Tailworm"],"first_seen":"2026-10-25T00:00:00Z","last_seen":"2026-10-28T01:05:26Z","objective":"Defensive public threat-intelligence record; see limitations and source references.","external_references":[{"source_name":"Tailscale security bulletins TS-2026-014 to TS-2026-017","url":"https://tailscale.com/security-bulletins"},{"source_name":"Tailscale SSH: Investigation and remediation update","url":"https://tailscale.com/ssh-investigation-update"},{"source_name":"Tailscale v1.104.4 release","url":"https://github.com/tailscale/tailscale/releases/tag/v1.104.4"},{"source_name":"Tailscale commits v1.104.2 to v1.104.4","url":"https://github.com/tailscale/tailscale/compare/v1.104.2...v1.104.4"},{"source_name":"Tailworm: Security assessment of Tailscale v1.104.2 and headscale v0.29.5 (Cyberdione Labs)","url":"https://tailworm.com/"},{"source_name":"BleepingComputer: Tailscale warns of SSH flaws allowing root privilege escalation","url":"https://www.bleepingcomputer.com/news/security/tailscale-warns-of-serious-ssh-flaws-allowing-root-privilege-escalation/"},{"source_name":"The Hacker News: Tailscale SSH flaws could let a hacked device reach root on other servers","url":"https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html"},{"source_name":"HOL: Tailworm turns one hacked laptop into root on your Tailscale SSH servers","url":"https://hol.org/blog/tailscale-tailworm-ssh-root-escalation-ts-2026-014-upgrade-1-104-4"}]}]}