<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: tailscale</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-28436: Tailscale is software for using Wireguard and multi-factor authentication (MFA)</title><link>https://patchthecve.com/cve/CVE-2023-28436.html</link><guid>https://patchthecve.com/cve/CVE-2023-28436.html</guid><pubDate>Wed, 17 Jun 2026 05:47:44 +0000</pubDate><description>MEDIUM 5.7: Tailscale is software for using Wireguard and multi-factor authentication (MFA). A vulnerability identified in the implementation of Tailscale SSH starting in version 1.34.0 and prior to prior to 1.38.2 in FreeBSD allows commands to be run with a higher privilege group ID than that specified in Tail</description></item><item><title>CVE-2022-41925: A vulnerability identified in the Tailscale client allows a malicious website to access the peer API, which ca</title><link>https://patchthecve.com/cve/CVE-2022-41925.html</link><guid>https://patchthecve.com/cve/CVE-2022-41925.html</guid><pubDate>Wed, 17 Jun 2026 05:04:04 +0000</pubDate><description>HIGH 8.8: A vulnerability identified in the Tailscale client allows a malicious website to access the peer API, which can then be used to access Tailscale environment variables. In the Tailscale client, the peer API was vulnerable to DNS rebinding. This allowed an attacker-controlled website visited by the no</description></item><item><title>CVE-2022-41924: A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tails</title><link>https://patchthecve.com/cve/CVE-2022-41924.html</link><guid>https://patchthecve.com/cve/CVE-2022-41924.html</guid><pubDate>Wed, 17 Jun 2026 05:04:04 +0000</pubDate><description>CRITICAL 9.6: A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code. In the Tailscale Windows client, the local API was bound to a local TCP socket, and communicated with the Windows c</description></item></channel></rss>