Tailscale VP of Engineering responds to SSH vuln concerns: no need to disable it yet

basedjensen · x · 2026-10-26

Tailscale VP of Engineering Mike Shaver officially responded on Reddit to concerns about Tailscale SSH: the researcher's report has been received, and the engineering and security teams have been independently investigating with help from external security specialists, identifying issues now being fixed.

Based on the current assessment, Tailscale is not recommending everyone disable Tailscale SSH, though the full scope of affected configurations is still being validated. The retweeter adds that Tailscale is open core rather than fully open source, with components that can't be audited — a warning against blindly trusting SaaS vendors.

Original post →

More from Infra

Infra channel →