--- title: Tailscale releases v1.104.4 to fix Tailworm SSH vulnerabilities url: https://www.dataloco.com/en/tailscale-releases-v11044-to-fix-tailworm-ssh-vulnerabilities published: 2026-10-31T14:21:07+00:00 language: en section: Security source: https://www.techtalkthai.com/tailscale-patches-tailworm-ssh-vulnerabilities-lateral-movement-tailnet/ organizations: Tailscale, Cyberdione Labs publisher: Dataloco --- # Tailscale releases v1.104.4 to fix Tailworm SSH vulnerabilities Tailscale has released version 1.104.4 to address four security vulnerabilities, including flaws in Tailscale SSH that were detailed in the Tailworm report. These issues allowed an attacker who had already compromised a device within a tailnet to escalate privileges and access other machines on the same network. The update is available now, and administrators are advised to apply it promptly to secure their environments. The patch resolves the specific weaknesses identified by security researchers, ensuring that the software-defined mesh networking platform maintains its integrity against lateral movement attacks. By fixing these bugs, Tailscale aims to prevent unauthorized access to internal resources that are protected by the tailnet architecture. The release marks a significant step in hardening the platform against sophisticated threats that exploit internal network trust. Users should verify their installations are up to date to benefit from these critical security improvements. The company emphasizes the importance of keeping all devices on the latest version to mitigate the risks associated with these vulnerabilities. This update is part of Tailscale's ongoing commitment to providing a secure and reliable networking solution for organizations of all sizes. The fix addresses the core issues that could have been exploited to gain root access on other servers within the permitted scope. Administrators should also review their access policies to ensure they align with the updated security posture. The release notes provide detailed information about the changes made in this version. Users can download the update from the official Tailscale website or through their package managers. The company has confirmed that all four vulnerabilities have been resolved in this release. There are no known workarounds for these issues, making the update essential for all users. The Tailworm report highlighted the potential for automated spread of access from one device to another, which Tailscale disputes, stating that access is limited by policy. Regardless of the classification, the vulnerabilities posed a significant risk to network security. The update includes fixes for the SSH server and other components of the platform. Tailscale recommends that users enable additional security features, such as Check mode, for high-value systems. This mode requires an extra step of identity verification before allowing access to machines. The company has also addressed a Denial-of-Service issue that could have been triggered by anyone on the internet. This flaw could have stopped the self-hosted control server or prevented new devices from joining the network. The Conn25 feature, which is in pre-production, also had vulnerabilities that have been fixed before its general availability. Tailscale's response to the Tailworm report demonstrates its dedication to security and transparency. The company worked with the researchers to understand the issues and develop appropriate fixes. The release of v1.104.4 is a testament to the collaborative nature of the security community. Users are encouraged to stay informed about security updates and apply them as soon as they are available. The tailnet model relies on strong encryption and identity-based access control to protect data. The WireGuard protocol is used to encrypt and transmit data between devices. Users only need to install the Tailscale app on each device and sign in with an existing account, such as Google or Microsoft. This simplifies the setup process and eliminates the need for complex router or firewall configurations. Organizations use Tailscale to allow employees and systems to access internal resources in a controlled manner without exposing them to the public internet. Tailscale SSH is a built-in SSH server that uses identities from Tailscale accounts and access policies defined by administrators to determine who can connect to which machines. Access is restricted to devices within the tailnet. The Tailworm report compiled vulnerabilities found in Tailscale SSH and other features. The attack via the SSH-side vulnerabilities required the attacker to first compromise at least one authorized device in the tailnet. The attacker could then use Tailscale SSH to control other servers with root privileges, but only those allowed by the tailnet policy file. The attacker could also steal keys used to register new devices, allowing them to introduce rogue machines that appear normal into the network. Researchers stated that in lab tests, this type of access spread automatically from one device to another. Tailscale disagrees with calling it a worm, stating that the attacker could only access machines already permitted for SSH connection by policy. Therefore, it should be viewed as lateral movement limited to the scope allowed by policy. The report also mentioned vulnerabilities in Conn25, the next-generation app connector feature still in pre-production. Tailscale stated it would fix these before enabling the feature. The Denial-of-Service issue allowed anyone on the internet to command the self-hosted Tailscale control server to stop working or prevent new devices from joining the network. Tailscale fixed all four vulnerabilities according to the Security Bulletin, including the Tailscale SSH flaws, and released the patch in Tailscale v1.104.4. Administrators should update to this version as soon as possible and review Tailscale SSH policies to limit access to only necessary users and devices. For high-value systems, it is recommended to consider enabling Check mode of Tailscale SSH, which forces an additional step of identity verification before accessing machines. ## This story in other languages - [日本語](https://www.dataloco.com/ja/ssh11044) - [한국어](https://www.dataloco.com/ko/tailscale-tailscale-ssh-tailworm) - [Indonesia](https://www.dataloco.com/id/tailscale-merilis-pembaruan-untuk-mengatasi-kerentanan-tailworm-pada-tailscale-ssh) - [Deutsch](https://www.dataloco.com/de/tailscale-veroffentlicht-aktualisierung-zur-behebung-von-tailworm-sicherheitslucken) - [Français](https://www.dataloco.com/fr/tailscale-corrige-les-failles-de-securite-tailworm-dans-sa-version-11044) - [Русский](https://www.dataloco.com/ru/tailscale-vypustila-obnovlenie-dlia-ustraneniia-uiazvimostei-tailworm-v-tailscale-ssh) - [Español](https://www.dataloco.com/es/tailscale-lanza-la-version-v11044-para-corregir-vulnerabilidades-de-tailworm-en-tailscale-ssh) - [Italiano](https://www.dataloco.com/it/tailscale-rilascia-la-versione-11044-per-correggere-le-vulnerabilita-ssh-note-come-tailworm) - [Svenska](https://www.dataloco.com/sv/tailscale-slapper-uppdatering-for-att-stanga-sakerhetsluckor-i-ssh-tjansten) - [Polski](https://www.dataloco.com/pl/tailscale-wydaje-aktualizacje-usuwajaca-luki-tailworm-w-usludze-tailscale-ssh) - [Nederlands](https://www.dataloco.com/nl/tailscale-brengt-update-uit-om-tailworm-kwetsbaarheden-in-ssh-op-te-lossen) - [Norsk](https://www.dataloco.com/no/tailscale-lanserer-v11044-for-a-luke-sarbarheter-i-ssh-tjenesten) - [עברית](https://www.dataloco.com/he/tailscale-tailscale-ssh) - [Português (Brasil)](https://www.dataloco.com/pt-br/tailscale-corrige-falhas-de-seguranca-no-ssh-e-impede-movimento-lateral-na-rede)