Releasesby Glyphtailscale 1.90.4
Please refer to the changelog available at https://tailscale.com/changelog
Also shipped Oct 28, 2025Tailscale in October 2025 →
Access private hostname applications support all ports/protocols
Cloudflare Access for private hostname applications can now secure traffic on all ports and protocols. Previously, applying Zero Trust policies to private applications required the application to use HTTPS on port 443 and support Server Name Indicator (SNI). This update removes that limitation.
Export dashboards as images
Sharing your Grafana dashboards just got easier. You can now export any dashboard as a PNG image. Use the Export as image option to generate an image: A preview of the image is displayed. Click Download image : Using dashboard images, you can quickly send data to your team in chat, added to a presentation, or attached to an email.
AI Search - Reranking and API-based system prompt configuration in AI Search
AI Search now supports reranking for improved retrieval quality and allows you to set the system prompt directly in your API requests. Rerank for more relevant results You can now enable reranking to reorder retrieved documents based on their semantic relevance to the user’s query.
CASB introduces new granular roles
Cloudflare CASB (Cloud Access Security Broker) now supports two new granular roles to provide more precise access control for your security teams: Cloudflare CASB Read: Provides read-only access to view CASB findings and dashboards.
Gateway - New Application Categories added for HTTP Traffic Management
To give you precision and flexibility while creating policies to block unwanted traffic, we are introducing new, more granular application categories in the Gateway product.
GitHub Copilot agent
GitHub Copilot users can now work with the GitHub Copilot agent directly within Linear. Delegate any issue directly or mention GitHub Copilot in a comment, and the agent will use the full issue context to start an implementation in a draft PR. You can follow Copilot's progress on the Linear issue or on the PR in GitHub.
More from TailscaleEvery Tailscale release →
Tailscale v1.90.4
All platforms Fixed: A deadlock issue no longer occurs in the client when checking for the network to be available. Linux Fixed: tailscaled no longer sporadically panics when a Trusted Platform Module (TPM) device is present. Windows Fixed: tailscaled no longer sporadically panics when a Trusted Platform Module (TPM) device is present.
Tailscale Services
- New: Use Tailscale Services to decouple applications and services from the devices that host them ( beta ).
Multiple tailnets for a single organization
- New: Administer multiple tailnets ( alpha ) under a single organization, using a common identity provider and domain.
Tailscale Peer Relays
- New: Use Tailscale Peer Relays for client-to-client connections when direct connections aren't possible ( beta ).
Visual policy editor (GA)
- Changed: Use the visual policy editor to create and manage your tailnet policy file ( generally available ).
Tailscale v1.90.3
All platforms Fixed: tailscaled shuts down as expected and without panic. Linux Fixed: tailscaled starts up as expected in a no router configuration environment. macOS Fixed: The Tailscale dock icon closes as expected when the client is not using the windowed UI ( beta ).
Tailscale 1.90.3
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale v1.90.5
Linux Fixed: Tailscale SSH no longer hangs for 10s when connecting to tsrecorder . This affected tailnets that use Tailscale SSH recording .