Tailscale’s Tailworm Disclosure Includes Serve and Funnel Findings
Tailscale published an overview of its Tailworm findings on Wednesday after security issues were disclosed over the weekend. Heise reports that the affected components could allow attackers to extend their privileges and establish themselves in a network; the company says version 1.104.4 or newer contains the available fixes.
The disclosure is broader than a single Tailscale SSH issue. Five findings concern Tailscale Serve and Funnel. Tailscale fixed three of them as software bugs in version 1.104.4, while the remaining two describe behavior that the company classifies as expected rather than defects. A separate finding involving the Conn25 app connector is not immediately relevant to deployed environments because that component is still in development and has not been released.
The SSH-related risk requires more than an exposed service alone. According to the report, an attacker must already have access to an authorized device in the tailnet, and the tailnet policy must permit SSH access. Under those conditions, an authenticated SSH session could perform operations beyond the logged-in user’s permissions, including when SSH forwarding is used.
That prerequisite makes existing access controls an important part of the practical risk. Tailscale’s tailnet connects managed devices through encrypted peer-to-peer communication using WireGuard, while Tailscale SSH uses access-control lists and WireGuard-based authentication. A compromised authorized device or another weakness that grants tailnet access could therefore provide the starting point described in the disclosure.
Tailscale’s security page lists four advisories, TS-2026-014 through TS-2026-017, for the affected components and issues. Administrators using the relevant software should consult those advisories and install Tailscale version 1.104.4 or newer, which the company identifies as containing the fixes.