MEDIUM5.7Go
GHSA-vfgq-g5x8-g595· CVE-2023-28436, GO-2023-1671Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process
Modified: 9/10/2026
package
Go/tailscale.com
pkg:go/tailscale.com
CRITICAL9.6Go
GHSA-vqp6-rc3h-83cp· CVE-2022-41924, GO-2022-1120Tailscale Windows daemon is vulnerable to RCE via CSRF
Modified: 8/21/2024
—Go
GO-2022-1119· CVE-2022-41925, GHSA-qccm-wmcq-pwr6Tailscale daemon is vulnerable to information disclosure via CSRF in tailscale.com
Modified: 3/3/2026
—Go
GO-2022-1120· CVE-2022-41924, GHSA-vqp6-rc3h-83cpTailscale Windows daemon is vulnerable to RCE via CSRF in tailscale.com
Modified: 3/3/2026
—Go
GO-2023-1671· CVE-2023-28436, GHSA-vfgq-g5x8-g595Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process in tailscale.com
Modified: 3/3/2026