Tailscale SSH checked paths as you and dialed them as root. I read all four bulletins.
A researcher report named Tailworm landed Saturday; Tailscale shipped fixes in v1.104.4 today. Four bulletins, one root cause: tailscaled validated as the user and acted as root — socket forwarding to the Docker socket, a serve path to full node takeover, a session-memory DoS, and an HTTP/2 capability race.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.