On October 27, 2026, Tailscale said it was working to patch 11 flaws reported by Cyberdione Labs, including issues that could allow privilege escalation under certain permissions and configurations. Tailscale advised against disabling Tailscale SSH entirely, while recommending users review access policies and consider disabling SSH forwarding. The full scope remained under review.
Sources
However, despite the severity of the issues, Tailscale said it doesn't recommend that users disable the Tailscale SSH feature.