Just to clarify, this is only exploitable for people which already has access to your tailnet. So people you already gave access. External attackers can’t do anything. But keep your software updated as always.

Amazing website, thank you for sharing. My favorite one:

Besides the time and responsibility of running the service, your biggest cost is going to be storage and maybe even transfer. None of the cheap VPS have big storage or bandwith, so I would not offer a service like this if I were you.