Tailscale SSH: Investigation and remediation update

Tailscale reports that its engineering and security teams, assisted by external specialists, are investigating vulnerabilities in Tailscale SSH. Most findings involve privilege escalation: in certain circumstances, a person or device already permitted to connect may be able to exceed the permissions of the local account they were assigned, potentially gaining higher privileges. The risk depends on access permissions, system configuration, and other conditions, and the company is still confirming the full scope. Because of that assessment, Tailscale is not advising all customers to turn off Tailscale SSH.

The company says fixes for most identified issues are implemented and are being tested, with a patched client release targeted for the end of October 27, subject to successful testing. Until then, customers should check that SSH policies grant access only to necessary users and devices, consider tightening access to sensitive systems, and prepare to install the update. Tailscale also recommends disabling SSH forwarding if it is not needed: setting TS_SSH_DISABLE_FORWARDING=1 in the tailscaled service environment and restarting the service turns off forwarding without disabling Tailscale SSH, mitigating several serious findings. A later security advisory will list confirmed vulnerabilities, affected versions and configurations, impacts, and remediation steps; a technical explanation of the causes and fixes will follow.