Tailscale SSH: Investigation and remediation update

	Tailscale SSH: Investigation and remediation update(tailscale.com)
	308 points by figmert 16 hours ago \| 168 comments
	tl;dr: Tailscale is investigating privilege escalation vulnerabilities in Tailscale SSH that could allow authorized users to exceed their configured local user permissions under certain conditions. A patched client release is targeted for October 27, and in the meantime they recommend tightening SSH access policies and disabling SSH forwarding via `TS_SSH_DISABLE_FORWARDING=1`. They are not advising users to disable Tailscale SSH entirely, and a full security advisory will follow the patch.
	HN Discussion: ↑Technical clarification confirming the vulnerability's limited scope aligns with Tailscale's assessment ↓Prefer stock OpenSSH over Tailscale SSH due to reduced attack surface ~Tailscale has too many features and should offer a lockdown mode ↑Tailscale is still a valuable security layer despite occasional vulnerabilities ↓Users should disable Tailscale SSH entirely, contrary to Tailscale's recommendation