Tailscale SSH: Investigation and remediation update

5 points by ahobson


ansemjo

There's an update in the blog with a bit more background and the most relevant security bulletin seems to be TS-2026-014.

tl;dr: a user already authorized to SSH to a node could access / forward sockets on the node that should only be accessible to root instead of being scoped to the user's permissions