Tailscale investigating Tailscale SSH privilege-escalation flaws
Original title: Tailscale SSH: Investigation and remediation update
Authorized Tailscale SSH users may exceed their local-user permissions; a patched client is targeted for October 27.
Tailscale says most identified Tailscale SSH issues are privilege escalation. Someone already allowed to connect may act beyond the configured local user's permissions and potentially gain elevated privileges. Exploitation depends on granted permissions, system configuration, and other conditions. Engineers have fixes for most issues and aim to ship a patched client by the end of October 27, with a full advisory afterward.
Unconfirmed: Tailscale says it is still verifying the full scope and which configurations are affected.
- Tailscale is not recommending that everyone disable Tailscale SSH.
- Setting TS_SSH_DISABLE_FORWARDING=1 mitigates several of the more serious findings.
- Affected versions and configurations will be detailed in a later security advisory.
- External security specialists are helping the investigation.
Impact: authorized users may exceed local-user permissions and gain elevated privileges
| Product | Affected |
|---|---|
| Tailscale SSH | — |
- 1.Review Tailscale SSH access policies and limit them to needed users and devices.
- 2.Set TS_SSH_DISABLE_FORWARDING=1 and restart tailscaled if SSH forwarding is unnecessary.
- 3.Apply the patched Tailscale client when Tailscale publishes it.
- Vendors
- Tailscale
- Products
- Tailscale SSH
From the original article
2 min read at tailscale.com
We're investigating security vulnerabilities affecting Tailscale SSH and wanted to share an update on what we've found, what we're doing about it, and what customers should know. Our engineering and security teams have been investigating the reported issues with help from external security specialists. This builds on work already underway, which we've accelerated to address the findings and prepare fixes.
By tailscale.com via ahobson · tailscale.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.