Tailscale SSH: Investigation and remediation update
5 points by ahobson
5 points by ahobson
There's an update in the blog with a bit more background and the most relevant security bulletin seems to be TS-2026-014.
tl;dr: a user already authorized to SSH to a node could access / forward sockets on the node that should only be accessible to root instead of being scoped to the user's permissions