Last weekend, a security researcher published a report titled “Tailworm,” describing potential vulnerabilities in Tailscale SSH and other Tailscale features.

Tailscale now published four security bulletins detailing the Tailscale SSH vulnerabilities, their impact, affected configurations, and recommended customer actions. They have also published a blog post explaining the investigation, findings, and the fixes made.