Tailworm – Tailscale Vulnerabilities
Summary
Tailworm provides a Security Assessment Report on Tail-scale v1.104.2 and headscale v0.29.5, detailing multiple high-severity findings across components like Tailscale SSH, app connectors, headscale, DERP, and serve/funnel. It outlines attacker kill chains, practical mitigations for operators, and vendor-side fixes, with emphasis on risk to SMB deployments utilizing mesh networks. The report is a rich source for understanding zero-trust posture risks and concrete hardening steps for IT teams.