megachangelog
Security1.102.3

Tailscale v1.102.3

This release includes a security fix for host-scoped IPv4 destinations in 4via6 addresses (TS-2026-011), Go runtime update to 1.26.6, and multiple platform-specific fixes for MagicDNS, Tailnet Lock startup, Windows installer, and memory usage on iOS and tvOS.

All Platforms
  • Changed: Go is updated to version 1.26.6.
  • Fixed: Tailscale refuses host-scoped IPv4 destinations at every point that acts on an unmapped 4via6 address. This fix addresses a security vulnerability described in TS-2026-011.
  • Fixed: When MagicDNS is disabled, unqualified hostnames are correctly forwarded to the configured nameservers.
  • Fixed: Resolved an issue where nodes with Tailnet Lock enabled on large tailnets would experience startup failures.
Windows
  • Fixed: Resolved an issue where the Windows installer would fail during an upgrade when the name of the user's home directory contained a space.
  • Fixed: tailscaled returns an error instead of panicking on devices where IPv6 or NetBios over TCP/IP is disabled.
iOS
  • Fixed: Memory usage is reduced for iOS devices on large tailnets.
tvOS
  • Fixed: Memory usage is reduced for tvOS devices on large tailnets.
securityfixmagicdnstailnet-lockiostvoswindows

Source: original entry ↗

More from Tailscale

Follow Tailscale to get its new changes in your feed and email digest.

Improvement1.104.1

Tailscale Kubernetes Operator v1.104.1

The Tailscale Kubernetes Operator v1.104.1 introduces shared Let's Encrypt account keys for ingress ProxyGroups, custom UDP ports for PeerRelay, image pull secrets support in DNSConfig, improved rolling updates for egress ProxyGroups, and fixes for coordination server URL configuration and HA Service cleanup. New Helm chart customization options and security improvements are also included.

kubernetesoperatorhelmnetworkingsecurity
Announcement1.104.1

Tailscale container image v1.104.1

A new release of the Tailscale container image is available on Docker Hub and GitHub packages repository. This version includes library updates only.

containerdockerreleasedependencies
Feature

Device Posture Monitoring and Alerts

Admins can now configure monitoring and alerts for device posture to help diagnose connectivity problems. New capabilities include badges on the Machines page, filtering by failing postures, custom error messages on clients, and push notifications for posture failures.

posturemonitoringalertsadmin-consolecompliance
See all Tailscale changes →