Skip to content
OpenAdvisories

Package · Go

tailscale.com

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.7
    CVE-2023-28436

    Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process

    Tailscale is software for using Wireguard and multi-factor authentication (MFA). A vulnerability identified in the implementation of Tailscale SSH starting in version 1.34.0 and prior to prior to 1.38.2 in FreeBSD allows commands to be run with a higher privi…

    tailscale tailscale tailscale.com Go
  • Critical 9.6
    CVE-2022-41924 Public exploit

    Tailscale Windows daemon is vulnerable to RCE via CSRF

    A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code. In the Tailscale Windows client, the local API was bound to a local TCP so…

    tailscale tailscale tailscale.com tailscale Alpine Go
  • Low 3.8
    CVE-2022-41925

    Tailscale daemon is vulnerable to information disclosure via CSRF

    A vulnerability identified in the Tailscale client allows a malicious website to access the peer API, which can then be used to access Tailscale environment variables. In the Tailscale client, the peer API was vulnerable to DNS rebinding. This allowed an atta…

    tailscale tailscale tailscale.com tailscale Alpine Go