Tailscale SSH: Investigation and remediation update
13 points
1/21/1970
2 days ago
by theanonymousone
Comments
alxsm
Good that they published an interim mitigation (TS_SSH_DISABLE_FORWARDING=1) before the full advisory instead of staying quiet until the patch. They already had an SSH issue earlier this year: in July (TS-2026-010) values passed through acceptEnv were visible to other local users via /proc and ended up in logs. Be careful when passing credentials through SSH environment variables.
Good that they published an interim mitigation (TS_SSH_DISABLE_FORWARDING=1) before the full advisory instead of staying quiet until the patch. They already had an SSH issue earlier this year: in July (TS-2026-010) values passed through acceptEnv were visible to other local users via /proc and ended up in logs. Be careful when passing credentials through SSH environment variables.