Tailscale SSH: Investigation and remediation update

Tailscale is currently investigating security vulnerabilities affecting its SSH feature. The engineering and security teams, assisted by external specialists, are working to resolve reported issues that could lead to privilege escalation. In certain situations, an authorized user may be able to perform actions beyond their intended permissions, potentially gaining elevated privileges.

However, the extent of the vulnerabilities and the configurations affected are still under verification. Tailscale is not currently recommending that customers disable Tailscale SSH. They have developed fixes for the majority of the identified issues and are testing a patched client release, aiming to roll out a fix by October 27th.

The company encourages customers to review their Tailscale SSH configuration in the meantime. Once the fixes are available, a security advisory and technical blog post will be published, detailing the vulnerabilities, affected versions and configurations, their impact, and remediation steps. Customers with specific concerns should contact Tailscale Support.