Tailnet creation API
- New: Use the tailnet creation API to create, list, and delete API-only tailnets in your organization ( alpha ).
- New: Use the tailnet creation API to create, list, and delete API-only tailnets in your organization ( alpha ).
All Platforms Fixed: Tailscale SSH Unix socket forwarding respects symlink permissions. This fix addresses a security vulnerability described in TS-2026-004 . Fixed: Tailscale SSH performs additional checks to disallow UIDs and numeric-only usernames. This fix covers additional scenarios described in TS-2026-006 .
- Changed: The Tailscale admin console is now available at console.tailscale.com . Authentication continues to use login.tailscale.com , and requests to login.tailscale.com/admin/ automatically redirect to the new subdomain.
Please refer to the changelog available at https://tailscale.com/changelog
All Platforms Fixed: Tailscale Serve Unix socket proxy targets are restricted to the root user. This fix addresses a security vulnerability described in TS-2026-005 . Fixed: Tailscale SSH does not allow the use of UIDs or numeric-only usernames. This fix addresses a security vulnerability described in TS-2026-006 .
- New: Microsoft Entra ID and Google Workspace group sync includes members of nested groups.
- New: Users with the Owner role can switch their tailnet's identity provider from the admin console for supported providers ( beta ).