Netbird v0.81.5 released

NetBird · October 26, 2026, 5:38pm

What’s Changed

[client] Validate and bound SSH session requests and channels (#8344) by @riccardomanfrin in [client] Validate and bound SSH session requests and channels (#8344) by riccardomanfrin · Pull Request #8368 · netbirdio/netbird · GitHub
[client] Bound the SSH session request queue and keep resizes from blocking the session loop (#8363) by @riccardomanfrin in [client] Bound the SSH session request queue and keep resizes from blocking the session loop (#8363) by riccardomanfrin · Pull Request #8369 · netbirdio/netbird · GitHub

Full Changelog: Comparing v0.81.4...v0.81.5 · netbirdio/netbird · GitHub

Vik · October 27, 2026, 7:27am

Hey folks,

You may have seen the recent Tailworm research on Tailscale SSH. We went through NetBird’s embedded SSH server with the same eye. The unix socket forwarding issues from that report don’t apply to us, since we don’t support that kind of forwarding. We did find a smaller problem in how our server handled some malformed or oversized session requests: a peer allowed to reach the SSH server could crash the NetBird daemon or tie up the session.

This is fixed in v0.81.5: Release v0.81.5 · netbirdio/netbird · GitHub

Only peers with the NetBird SSH server enabled are affected, and only from peers that an access policy allows to reach SSH on them. When SSH JWT auth is on, only authenticated users can reach this code. If you run the SSH server, we recommend updating your client to avoid such issues.