Remix.run Logo
▲ slowin 2 hours ago

I self-host a tailnet with Headscale and could not be happier: https://headscale.net/stable/

▲minimaltom an hour ago | parent | next [-]

If you use Tailscale SSH with headscale you are also affected. The vuln is in tailscaled, not the control plane / netmap.

▲dist-epoch 2 hours ago | parent | prev [-]

Sure, that doesn't mean it's not vulnerable.

> Organizations using headscale v0.29.5 have no mechanism to disable the forwarding behavior at the center of the finding.

https://techjacksolutions.com/scc-vendor-rollup/tailscale-he...