Tailscale warns of SSH flaws allowing root privilege escalation

Tailscale’s security team reported 11 vulnerabilities, collectively known as Tailworm. They were identified during an audit of Tailscale 1.104.2 and the self-hosted headscale 0.29.5 control server. The flaws could allow authorized attackers to steal credentials, crash servers, or gain elevated privileges.