Observed arrival · 2026-10-25
Tailworm’s Tailscale and headscale security assessment
Tailworm publishes a detailed security assessment of Tailscale v1.104.2 and headscale v0.29.5, with numbered findings, severity labels, and remediation guidance.
- For
- Tailscale and headscale operators and security reviewers
- Worth noticing
- The contents distinguish eleven findings from measured negative results and include a section on scope and limits for time-based access grants.
Field notes
The contents move from authentication and attacker-enumeration background into findings spanning SSH forwarding, connectors, memory exhaustion, and serve/funnel behavior. They also separate operator-actionable interim mitigations from root-cause fixes directed at maintainers. The page lists measured negative results as well as vulnerabilities, but the extracted evidence does not establish whether the findings have been independently reviewed or disclosed to the vendors.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue