I self-host a tailnet with Headscale and could not be happier:

slowin • yesterday at 8:33 PM • 3 replies • view on HN

I self-host a tailnet with Headscale and could not be happier: https://headscale.net/stable/

If you use Tailscale SSH with headscale you are also affected. The vuln is in tailscaled, not the control plane / netmap.

teekert • today at 6:57 AM

dist-epoch • yesterday at 8:39 PM

Sure, that doesn't mean it's not vulnerable.

> Organizations using headscale v0.29.5 have no mechanism to disable the forwarding behavior at the center of the finding.

alt Hacker News