Skip to content
OpenAdvisories

Package · Alpine

tailscale

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.6
    CVE-2022-41924 Public exploit

    Tailscale Windows daemon is vulnerable to RCE via CSRF

    A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code. In the Tailscale Windows client, the local API was bound to a local TCP so…

    tailscale tailscale tailscale.com tailscale Alpine Go
  • Low 3.8
    CVE-2022-41925

    Tailscale daemon is vulnerable to information disclosure via CSRF

    A vulnerability identified in the Tailscale client allows a malicious website to access the peer API, which can then be used to access Tailscale environment variables. In the Tailscale client, the peer API was vulnerable to DNS rebinding. This allowed an atta…

    tailscale tailscale tailscale.com tailscale Alpine Go