From d720330c32c2da1337bd63fb7f4617ab7bbcfeb2 Mon Sep 17 00:00:00 2001
From: Brad Fitzpatrick <bradfitz@tailscale.com>
Date: Fri, 23 Jan 2026 07:07:18 -0800
Subject: [PATCH] ssh/tailssh: fix observed crash in Tailscale SSH

Updates tailscale/corp#36268

Change-Id: Ie9da0da59808a5475dc41c67376ee73ccd254486
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
---
 ssh/tailssh/tailssh.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ssh/tailssh/tailssh.go b/ssh/tailssh/tailssh.go
index 91e1779bf..289807ea3 100644
--- a/ssh/tailssh/tailssh.go
+++ b/ssh/tailssh/tailssh.go
@@ -736,7 +736,7 @@ func (c *conn) isStillValid() bool {
 	if !a.Accept && a.HoldAndDelegate == "" {
 		return false
 	}
-	return c.localUser.Username == localUser
+	return c.localUser != nil && c.localUser.Username == localUser
 }
 
 // checkStillValid checks that the conn is still valid per the latest SSHPolicy.