webvm

WebVM This repository hosts the source code for https://webvm.io, a Linux virtual machine that runs in your browser. Try out the new Alpine / Xorg / i3 graphical environment: https://webvm.io/alpine.html What is WebVM? WebVM is a server-less virtual environment running fully client-side in...

tailsnitch

Tailsnitch A security auditor for Tailscale configurations. Tailsnitch scans your tailnet for 57 misconfigurations, overly permissive access controls, and security best practice violations. Quick Start 1. Set your Tailscale API credentials export TSAPIKEY="tskey-api-..." 2. Run audit tailsnitch 3...

headscale

An open source, self-hosted implementation of the Tailscale control server. Join our Discord server for a chat. Note: Always select the same GitHub tag as the released version you use to ensure you have the correct example configuration. The main branch might contain unreleased changes. The...

CVE-2022-41924

CVE-2022-41924 POC 👉 https://oalieno.tw/posts/tailscale-rce...

phone-deck

phone-deck Turn a spare Android phone or any device with a browser into a self-hosted control deck and remote desktop for your Linux workstation — over your private Tailscale network, with no third-party apps. It started as "what do I do with an old phone?" and became a control plane for a Hyprla...

GO-2026-6865 vulnerabilities

Vulnerabilities for packages: kwok, kaf, prometheus, verticadb-operator, wgcf, grafana, opa, crane, tempo, dive, pulumi-language-dotnet, kyverno-policy-reporter-kyverno-plugin, kbld, kyverno-notation-aws, wolfictl, minio, local-path-provisioner, skopeo, kafkaexporter, restic, neuvector-scanner,...

CVE-2026-116591 vulnerabilities

Vulnerabilities for packages: kwok, kaf, prometheus, verticadb-operator, wgcf, grafana, opa, crane, tempo, dive, pulumi-language-dotnet, kyverno-policy-reporter-kyverno-plugin, kbld, kyverno-notation-aws, wolfictl, minio, local-path-provisioner, skopeo, kafkaexporter, restic, neuvector-scanner,...

GHSA-FPMH-FRQ8-7RJ8 vulnerabilities

Vulnerabilities for packages: kwok, kaf, prometheus, verticadb-operator, wgcf, grafana, opa, crane, tempo, dive, pulumi-language-dotnet, kyverno-policy-reporter-kyverno-plugin, kbld, kyverno-notation-aws, wolfictl, minio, local-path-provisioner, skopeo, kafkaexporter, restic, neuvector-scanner,...

CVE-2026-107060

A flaw was found in Tailscale. Insecure permissions allow an unauthorized attacker to make arbitrary modifications to another user's Virtual Private Network VPN configurations and preferences. An attacker could exploit this issue to alter network routing and connection settings without proper...

[SECURITY] Fedora 43 Update: tailscale-1.102.5-1.fc43

The easiest, most secure way to use WireGuard and 2FA...

[SECURITY] Fedora 44 Update: tailscale-1.102.5-1.fc44

The easiest, most secure way to use WireGuard and 2FA...

Fedora 44 : tailscale (2026-c8bfae6071)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c8bfae6071 advisory. update to 1.102.5 ---- update to 1.98.10, fix several cves Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 43 : tailscale (2026-0451d4f86a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0451d4f86a advisory. update to 1.102.5 ---- update to 1.98.10, fix several cves Tenable has extracted the preceding description block directly from the Fedora security...

openSUSE 16: tailscale / tailscale-bash-completion / tailscale-fish-completion / etc (openSUSE-SU-2026:22203-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22203-1 advisory. Changes in tailscale: Update to version 1.104.1: - Go is updated to version 1.27 - WireGuard packet buffering uses less memory while waiting for peer...

Security update for tailscale (important)

openSUSE security update: security update for tailscale ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22203-1 Rating: important References: bsc1260968 bsc1272825 Cross-References: CVE-2026-33747 CVSS scores: CVE-2026-33747 SUSE : 8.4...

OPENSUSE-SU-2026:22203-1 Security update for tailscale

This update for tailscale fixes the following issues: Changes in tailscale: Update to version 1.104.1: + Go is updated to version 1.27 + WireGuard packet buffering uses less memory while waiting for peer handshakes + WireGuard packet queue depth scales with CPU core count, reducing peak memory...

CVE-2026-107060

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences...

CVE-2026-107060

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences...

PT-2026-132391

Name of the Vulnerable Software and Affected Versions Tailscale version 297862600 Description Insecure permissions in the Android application allow an unauthorized attacker to make arbitrary changes to another user's VPN configurations and preferences. Recommendations At the moment, there is no...

PT-2026-134799

This update for tailscale fixes the following issues: Changes in tailscale: Update to version 1.104.1: + Go is updated to version 1.27 + WireGuard packet buffering uses less memory while waiting for peer handshakes + WireGuard packet queue depth scales with CPU core count, reducing peak memory...