Tailscale says it failed to enforce privilege boundaries in Tailscale SSH: authorized peers with forwarding access could reach root-only sockets. The company says exploitation requires an authorized foothold and policy-permitted access. Update to v1.104.4 or later and review SSH policies.
tailscale.comTailscale SSH: Investigation and remediation updateAn update on the Tailscale SSH security investigation, remediation progress, and what customers can do now.