What’s New

Tailscale

Developer Tools

Changelog for the Tailscale mesh VPN.

Latest · by TailscaleWebsite

Changelog

Tailscale v1.98.10

All Platforms Fixed: Tailscale SSH Unix socket forwarding respects symlink permissions. This fix addresses a security vulnerability described in TS-2026-004 . Fixed: Tailscale SSH preforms additional…

Fixed
  • Tailscale SSH performs additional permission checks
Security
  • Tailscale SSH Unix socket forwarding respects symlink permissions, addressing vulnerability TS-2026-004
View originalPermalink

Admin console URL change

Changed: The Tailscale admin console is now available at console.tailscale.com . Authentication continues to use login.tailscale.com , and requests to login.tailscale.com/admin/ automatically redirect…

Changed
  • The Tailscale admin console is now available at console.tailscale.com
View originalPermalink

Tailscale v1.98.9

All Platforms Fixed: Tailscale Serve Unix socket proxy targets are restricted to the root user. This fix addresses a security vulnerability described in TS-2026-005 . Fixed: Tailscale SSH does not all…

Security
  • Restrict Tailscale Serve Unix socket proxy targets to the root user to address security vulnerability TS-2026-005
View originalPermalink

Nested group support for synced groups

New: Microsoft Entra ID and Google Workspace group sync includes members of nested groups.

Added
  • Microsoft Entra ID and Google Workspace group sync now includes members of nested groups
View originalPermalink

Self-serve identity provider changes

New: Users with the Owner role can switch their tailnet's identity provider from the admin console for supported providers ( beta ).

Added
  • Users with the Owner role can switch their tailnet's identity provider from the admin console for supported providers
View originalPermalink

Device Provisioning with OAuth Apps

New: Create and manage OAuth Apps for Device Provisoning with the Tailscale API (alpha) .

Added
  • Create and manage OAuth Apps for Device Provisioning with the Tailscale API
View originalPermalink

Tailscale v1.98.8

Note : 1.98.6 and 1.98.7 were release candidates intended for testing only. All Platforms Fixed: An issue causing connectivity disruptions when the operating system wakes from sleep in wireguard-go is…

Fixed
  • An issue causing connectivity disruptions when the operating system wakes from sleep in wireguard-go
View originalPermalink

Public IP address device posture attribute

New: ip:publicAddress device posture attribute is available for use in postures and viewable on the Machines page of the admin console. To test, go to the Settings page of the admin console and toggle…

Added
  • ip:publicAddress device posture attribute is available for use in postures and viewable on the Machines page of the admin console
View originalPermalink

Tailnet system policy values

Changed: The Tailnet system policy accepts a comma-separated list of tailnet IDs or organization IDs.

Changed
  • The Tailnet system policy now accepts a comma-separated list of tailnet IDs or organization IDs
View originalPermalink

Log streaming integration with Azure Blob Storage

New: Tailscale network flow logs and configuration audit logs can be streamed to Azure Blob Storage .

Added
  • Network flow logs and configuration audit logs can be streamed to Azure Blob Storage
View originalPermalink

Aperture chat, connectors, and sandboxes

New: Use identity-aware connectors to let agents and users reach your data via MCP and API endpoints ( alpha ). Tailnet access controls apply to every request, giving you one identity system across th…

Added
  • Identity-aware connectors allow agents and users to reach data via MCP and API endpoints with Tailnet access controls applied to every request
View originalPermalink

Group visibility on Tailscale clients

New: Configure devices on your tailnet to receive group membership information from the Tailscale control plane ( alpha ).

Added
  • Configure devices on your tailnet to receive group membership information from the Tailscale control plane
View originalPermalink

Tailscale v1.98.5

All Apple Platforms Changed: macOS and iOS clients are now built using the Xcode 26.5 toolchain.

Changed
  • macOS and iOS clients are now built using the Xcode 26.5 toolchain
View originalPermalink

Preset app support for Oracle Cloud Infrastructure (OCI)

New: Preset apps are available for Oracle Cloud Infrastructure (OCI) , including per-region compute and networking, per-region Object Storage, and a global preset for the Oracle Services Network (OSN)…

Added
  • Preset apps are now available for Oracle Cloud Infrastructure (OCI), including per-region compute and networking, per-region Object Storage, and a global preset for the Oracle Services Network (OSN)
View originalPermalink

Tailscale Kubernetes Operator v1.98.4

A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . Fixed: The operator no longer fails to perform token…

Fixed
  • The operator no longer fails to perform token operations
View originalPermalink

Tailscale v1.98.4

All Platforms Fixed: An issue causing a deadlock when processing peer changes and disconnecting from the Tailscale control server is resolved.

Fixed
  • An issue causing a deadlock when processing peer changes and disconnecting from the Tailscale control server
View originalPermalink