Tailscale SSH: Investigation and remediation update
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Tailscale has disclosed an ongoing investigation into security vulnerabilities in Tailscale SSH, mostly privilege escalation where an already-authorized connecting user could exceed the permissions of their local account. Fixes for most issues are implemented, with a patched client targeted for release by October 27, 2026, pending testing.