Tailscale vulnerabilities

Products

• Tailscale 3

Newest

• tailscale Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process CVE-2023-28436 Fix available 5.7 MediumMarch 23, 2023
• tailscale Tailscale daemon is vulnerable to information disclosure via CSRF CVE-2022-41925 Fix available 3.8 LowNovember 21, 2022
• tailscale Tailscale Windows daemon is vulnerable to RCE via CSRF CVE-2022-41924 Public exploitFix available 9.6 CriticalNovember 21, 2022