Tailscale SSH: Investigation and remediation update

Title: Tailscale SSH: Investigation and remediation update 标题：Tailscale SSH：调查与补救更新

Updated October 27th 2026 更新于 2026 年 10 月 27 日

We’ve now published four security bulletins detailing the Tailscale SSH vulnerabilities, their impact, affected configurations, and recommended customer actions. We’ve also published a blog post explaining our investigation, the findings, and the fixes we’ve made. 我们现已发布四份安全公告，详细说明了 Tailscale SSH 的漏洞、其影响、受影响的配置以及建议客户采取的行动。我们还发布了一篇博客文章，解释了我们的调查过程、调查结果以及我们所做的修复。

For the latest information, please refer to: Tailscale SSH: Findings and fixes 如需最新信息，请参阅： Tailscale SSH：调查结果与修复

We recommend that customers using Tailscale SSH review the bulletins and follow the applicable update guidance. 我们建议使用 Tailscale SSH 的客户查阅这些公告，并遵循适用的更新指南。

—————————————————————————————————————————————

We’re investigating security vulnerabilities affecting Tailscale SSH and wanted to share an update on what we’ve found, what we’re doing about it, and what customers should know. 我们正在调查影响 Tailscale SSH 的安全漏洞，并希望分享关于我们所发现的问题、我们正在采取的措施以及客户应了解事项的最新进展。

Our engineering and security teams have been investigating the reported issues with help from external security specialists. This builds on work already underway, which we’ve accelerated to address the findings and prepare fixes. 我们的工程和安全团队在外部安全专家的帮助下，一直在调查所报告的问题。这是在我们既有工作的基础上进行的，我们已加快进度以解决这些发现并准备修复方案。

Most of the Tailscale SSH issues we’ve identified concern privilege escalation. In some circumstances, someone already authorized to connect over Tailscale SSH may be able to perform actions beyond the permissions of their configured local user, including potentially gaining elevated privileges. 我们发现的大多数 Tailscale SSH 问题都涉及权限提升。在某些情况下，已经获得通过 Tailscale SSH 连接授权的人员可能能够执行超出其配置的本地用户权限范围的操作，包括可能获得提升的权限。

These are serious security issues, and we’re treating them accordingly. 这些是严重的安全问题，我们正以相应的态度对待它们。

Exploitation depends on the permissions granted to the connecting user or device, the system’s configuration, and other conditions. We’re continuing to verify the full scope of the findings and which configurations may be affected. 漏洞利用取决于授予连接用户或设备的权限、系统配置以及其他条件。我们正在继续核实调查结果的全部范围，以及哪些配置可能受到影响。

Based on our current assessment, we’re not recommending that everyone disable Tailscale SSH. 根据我们目前的评估，我们不建议所有人禁用 Tailscale SSH。

Our engineers have implemented fixes for most of the issues identified and are completing testing ahead of a patched client release. 我们的工程师已经针对所发现的大多数问题实施了修复，并正在完成补丁客户端发布前的测试工作。

We’re targeting a release by the end of Tuesday 27 October, subject to successful completion of testing. We’ll update this page when the patched version is available, or if that timeline changes. 我们的目标是在 10 月 27 日星期二结束前发布，前提是测试顺利完成。当补丁版本可用或该时间表发生变化时，我们将更新此页面。

We’re continuing to review the remaining findings and verify that our changes address the underlying problems. 我们正在继续审查剩余的调查结果，并验证我们的更改是否解决了根本问题。

While we’re preparing the update, we recommend reviewing your Tailscale SSH configuration: 在我们准备更新的同时，我们建议您检查您的 Tailscale SSH 配置：

Once the fixes are available, we’ll publish a security advisory detailing the confirmed vulnerabilities, affected versions and configurations, their impact, and how to address them. We will link to that here when available. 一旦修复方案可用，我们将发布一份安全公告，详细说明已确认的漏洞、受影响的版本和配置、其影响以及如何解决这些问题。届时我们将在此处提供链接。

We’ll follow that with a technical blog post explaining the findings, the underlying causes, and the engineering changes we’ve made, again linked here when published. 随后，我们将发布一篇技术博客文章，解释调查结果、根本原因以及我们所做的工程变更，发布后同样会在此处提供链接。

If our assessment changes or we identify any additional steps customers need to take, we’ll communicate those. 如果我们的评估发生变化，或者我们确定客户需要采取任何额外步骤，我们将进行沟通。

If you have questions about your particular environment, please contact Tailscale Support. 如果您对您的特定环境有疑问，请联系 Tailscale 支持团队。