Security researcher Erica Windisch published the Tailworm report examining Tailscale and headscale.

Lab testing claims a compromised device can gain root access across reachable servers under specific conditions involving SSH port forwarding and access rules.

The report was published on October 25 by security researcher Erica Windisch of Cyberdione Labs and is based on three days of testing conducted in a lab environment. The research examined Tailscale in version 1.104.2 and headscale in version 0.29.5.

How the problem works in practice

Tailscale's login function directly identifies the device instead of checking the user's password or digital key, based on predefined access rules.

According to lab tests, if an attacker controls an authorized device, they could exploit the connection to connect to internal system communications points.…