If you use Tailscale SSH with headscale you are also affected. The vuln is in tailscaled, not the control plane / netmap.