Tailscale warns of SSH vulnerabilities that may grant root privileges

Cyberdione Labs identified 11 vulnerabilities in Tailscale software and the self-hosted headscale control server, collectively called Tailworm. Tailscale said the issues are serious, and some could allow an already authorized Tailscale SSH user to perform actions beyond the permissions of the configured local user, potentially gaining elevated privileges.