Tailscale races to patch Tailworm SSH flaws after uncoordinated disclosure

· Cybersecurity

Tailscale is preparing patches for SSH vulnerabilities whose details went public over the weekend, before any fixes had been released. The company's security team said it is working to patch almost a dozen flaws that could be exploited to steal credentials, crash servers and gain root privileges. The uncoordinated disclosure, dubbed Tailworm, forced the vendor to respond publicly in real time. The immediate effect is a race between attackers who can now study the public details and administrators waiting for fixes to a networking tool widely used to connect infrastructure. The company said it is preparing a patch.

Why it matters：Uncoordinated disclosure of flaws in a widely deployed connectivity tool leaves customers exposed before fixes exist, underscoring how disclosure timing itself shapes risk for infrastructure operators.

Key points

  • Details of the flaws, dubbed Tailworm, went public over the weekend before fixes were released.
  • The flaws could allow credential theft, server crashes and root privilege escalation.
  • Tailscale said it is working to patch almost a dozen vulnerabilities.

Sources (original reporting)

More stories from this day