Tailscale SSH Privilege Escalation Bugs Under Fix
Original: Tailscale SSH: Investigation and remediation update
Why This Matters
Privilege escalation in a zero-trust SSH layer undermines core network security guarantees.
Tailscale disclosed privilege escalation vulnerabilities in Tailscale SSH on Oct 26, 2026. Authorized users may gain elevated permissions beyond their configured local user. A patched client release is targeted for Oct 27.
Tailscale has disclosed a set of security vulnerabilities affecting Tailscale SSH, centered on privilege escalation. According to the company, users already authorized to connect over Tailscale SSH may, under certain conditions, perform actions beyond what their configured local user account permits — potentially gaining elevated privileges on the target system.
Tailscale's engineering and security teams are investigating with help from external security specialists, accelerating work already in progress. The company says exploitation depends on the permissions granted to the connecting user or device, the system's configuration, and other environmental conditions. The full scope of affected configurations is still being verified.
Fixes have been implemented for most identified issues and are in final testing ahead of a patched client release targeted for end of day Tuesday, October 27. The company says it will update its status page if that timeline changes.
Tailscale is not recommending blanket disablement of Tailscale SSH. Instead, it advises users to review SSH access policies, restrict access to only necessary users and devices, and disable SSH forwarding if unused by setting the environment variable TS_SSH_DISABLE_FORWARDING=1.