Tailscale vulnerabilities
We track 3 vulnerabilities in Tailscale products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 23, 2023.
Latest Tailscale vulnerabilities
- 8.0 High severity
tailscale: Improper Privilege Management
Tailscale is software for using Wireguard and multi-factor authentication (MFA). A vulnerability identified in the implementation of Tailscale SSH starting in version 1.34.0 and prior to prior to 1.38.2 in FreeBSD allows commands to be run with a higher privil
- 8.8 High severity
tailscale: Cross-Site Request Forgery
A vulnerability identified in the Tailscale client allows a malicious website to access the peer API, which can then be used to access Tailscale environment variables. In the Tailscale client, the peer API was vulnerable to DNS rebinding. This allowed an attac
- 9.6 Critical severity
tailscale: Origin Validation Error
A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code. In the Tailscale Windows client, the local API was bound to a local TCP soc