https://cve.radiocsirt.org/rss/recent/tailscale/10 Most recent entries from tailscale 2026-10-02T07:59:00.143416+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/ts-2026-011 ts-2026-011 — <p><strong><em>Description</em></strong>: Insufficient validation of 4via6 subnet router destinations permitted access… 2026-10-02T07:59:00.146762+00:00 ts-2026-011 https://cve.radiocsirt.org/vuln/ts-2026-010 ts-2026-010 — <p><strong><em>Description</em></strong>: Tailscale SSH exposed accepted environment variable values on the command lin… 2026-10-02T07:59:00.146804+00:00 ts-2026-010 https://cve.radiocsirt.org/vuln/ts-2026-009 ts-2026-009 — <p><strong><em>Description</em></strong>: Insecure command line argument handling in Tailscale SSH permitted <code>root… 2026-10-02T07:59:00.146827+00:00 ts-2026-009 https://cve.radiocsirt.org/vuln/ts-2026-008 ts-2026-008 — <p><strong><em>Description</em></strong>: A single malformed HTTP request to a node running Tailscale Serve or Funnel c… 2026-10-02T07:59:00.146845+00:00 ts-2026-008 https://cve.radiocsirt.org/vuln/ts-2026-007 ts-2026-007 — <p><strong><em>Description</em></strong>: Insufficient inbound packet filtering in Services permitted access to loopbac… 2026-10-02T07:59:00.146863+00:00 ts-2026-007 https://cve.radiocsirt.org/vuln/ts-2026-006 ts-2026-006 — <p><strong><em>Description</em></strong>: Tailscale SSH allowed users to be addressed by numeric UID, bypassing <code>r… 2026-10-02T07:59:00.146878+00:00 ts-2026-006 https://cve.radiocsirt.org/vuln/ts-2026-005 ts-2026-005 — <p><strong><em>Description</em></strong>: Tailscale Serve Unix socket proxy targets were not restricted to <code>root</… 2026-10-02T07:59:00.146892+00:00 ts-2026-005 https://cve.radiocsirt.org/vuln/ts-2026-004 ts-2026-004 — <p><strong><em>Description</em></strong>: Tailscale SSH Unix socket forwarding did not respect symlink permissions, all… 2026-10-02T07:59:00.146909+00:00 ts-2026-004 https://cve.radiocsirt.org/vuln/ts-2026-003 ts-2026-003 — <p><strong><em>Description</em></strong>: OAuth access tokens recorded in tailnet audit logs.</p> <h4>What happened?</h… 2026-10-02T07:59:00.146927+00:00 ts-2026-003 https://cve.radiocsirt.org/vuln/ts-2026-002 ts-2026-002 — <p><strong><em>Description</em></strong>: ACL capability bypass in the Tailscale client's web interface</p> <h4>What ha… 2026-10-02T07:59:00.146941+00:00 ts-2026-002