Read the docs

tailscale

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

tailscale records in CISA KEV

No tailscale vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tailscale 3 records HIGH

Records

3 records in Tailscale · all components

TI-2022-20265 CVE-2022-41924 · GHSA-vqp6-rc3h-83cp

Tailscale Windows daemon is vulnerable to RCE via CSRF

Priority HIGH 74

A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01852 Published 2022-11-23 Fixed in 1.32.3 CWE-346
TI-2022-20266 CVE-2022-41925 · GHSA-qccm-wmcq-pwr6

Tailscale daemon is vulnerable to information disclosure via CSRF

Priority HIGH 71

A vulnerability identified in the Tailscale client allows a malicious website to access the peer API, which can then be used to access Tailscale environment variables.

CVSS 3.1HIGH 8.8 Adjacent network No auth User interaction EPSS 0.00566 Published 2022-11-23 Fixed in 1.32.3 CWE-352
Open these records in search →