Comment by slowin 14 hours ago I self-host a tailnet with Headscale and could not be happier: https://headscale.net/stable/ 3 comments slowin Reply minimaltom 13 hours ago If you use Tailscale SSH with headscale you are also affected. The vuln is in tailscaled, not the control plane / netmap. teekert 3 hours ago https://tailworm.com/#security-assessment-report-tailscale-v... dist-epoch 14 hours ago Sure, that doesn't mean it's not vulnerable.> Organizations using headscale v0.29.5 have no mechanism to disable the forwarding behavior at the center of the finding.https://techjacksolutions.com/scc-vendor-rollup/tailscale-he...
minimaltom 13 hours ago If you use Tailscale SSH with headscale you are also affected. The vuln is in tailscaled, not the control plane / netmap.
dist-epoch 14 hours ago Sure, that doesn't mean it's not vulnerable.> Organizations using headscale v0.29.5 have no mechanism to disable the forwarding behavior at the center of the finding.https://techjacksolutions.com/scc-vendor-rollup/tailscale-he...
If you use Tailscale SSH with headscale you are also affected. The vuln is in tailscaled, not the control plane / netmap.
https://tailworm.com/#security-assessment-report-tailscale-v...
Sure, that doesn't mean it's not vulnerable.
> Organizations using headscale v0.29.5 have no mechanism to disable the forwarding behavior at the center of the finding.
https://techjacksolutions.com/scc-vendor-rollup/tailscale-he...