megachangelog
Security1.98.10

Tailscale SSH security fixes

Fixed security vulnerabilities in Tailscale SSH, including Unix socket forwarding symlink permission handling and additional UID/username validation checks across all platforms.

All Platforms

  • Fixed: Tailscale SSH Unix socket forwarding respects symlink permissions. This fix addresses a security vulnerability described in TS-2026-004.
  • Fixed: Tailscale SSH preforms additional checks to disallow UIDs and numeric-only usernames. This fix covers additional scenarios described in TS-2026-006.
sshsecurityunix

Source: original entry ↗