Tailworm report: Tailscale SSH socket forwarding grants root access across tailnet

Cyberdione Labs published the Tailworm report detailing 11 findings in Tailscale 1.104.2 and headscale 0.29.5, including unix-socket forwarding inside Tailscale SSH that runs as root and lets an ordinary approved session reach docker.sock and tailscaled.sock. Tailscale said it has the report and is fixing issues but does not recommend disabling Tailscale SSH; no CVE or patched version existed at publication.

• 11 findings in five classes reproduced in a lab on 22–24 October 2026
• Socket forwarding runs as root inside tailscaled, reaching docker.sock and /run/systemd/private
• Without per-pair access rules, spread took under a second per hop
• No CVE or fixed version was published when the report went public