Skip to content
OpenAdvisories

Vendor

tailscale

3 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Low 3.8

    Tailscale daemon is vulnerable to information disclosure via CSRF

    A vulnerability identified in the Tailscale client allows a malicious website to access the peer API, which can then be used to access Tailscale environment variables. In the Tailscale client, the peer API was vulnerable to DNS rebinding. This allowed an atta…