Releasesby GlyphTailscale v1.94.1
Note : 1.94.0 was a release candidate intended for testing only. All Platforms New: tailscaled_home_derp_region_id client metrics are available. New: tailscaled_peer_relay_forwarded_packets_total and tailscaled_peer_relay_forwarded_bytes_total client metrics are available for Tailscale Peer Relays .
Also shipped Jan 26, 2026Tailscale in January 2026 →
Security Update: DoS vulnerability in Next.js and React Server Components
A denial-of-service (DoS) vulnerability (CVE-2026-23864, CVSS 7.5) has been disclosed affecting React Server Components (RSCs), a feature used by Next.js and other React metaframeworks. A malicious payload can cause memory exhaustion or excessive CPU consumption.
DuckDB 1.4.4 Bugfix Release
This is a bug fix release for various issues discovered after we released 1.4.3. Please excuse the erroneous release earlier. Cast Fix: Correctly handle negative exponent with a number with a decimal in VARCHAR -> INTEGER cast [Storage] Fix NULL filter check for constant segments fixing staged upload for install.duckdb.org - hopefully Remove undefined loop...
WAF Release - 2026-01-26
This week’s release introduces new detections for denial-of-service attempts targeting React CVE-2026-23864 ( https://www.cve.org/CVERecord?id=CVE-2026-23864 ↗ ). Key Findings CVE-2026-23864 ( https://www.cve.org/CVERecord?id=CVE-2026-23864 ↗ ) affects react-server-dom-parcel , react-server-dom-turbopack , and react-server-dom-webpack packages.
FigJam diagramming in Claude
Prompt to turn conversations, documents, and images into visual diagrams to break down complexity and visualize the bigger picture.
Compiler cache for builds and Workflows
Control build caching behavior on EAS with environment variables to speed up subsequent builds by up to 30%.
Webhooks Ingester
A self-hosted solution to store all your Resend webhook events in your own database.
More from TailscaleEvery Tailscale release →
Tailscale Services GA
- Changed: Use Tailscale Services to decouple applications and services from the devices that host them ( generally available ).
tsnet integration for Tailscale Services
- New: tsnet application support for Tailscale Services hosts.
Tailscale 1.94.1
Please refer to the changelog available at https://tailscale.com/changelog
Workload identity federation updates
- New: Workload identity federation supports provider-native identity token authentication for GitOps for Tailscale with GitHub Actions and GitOps for Tailscale with GitLab CI . New: Token exchange error details for a federated identity can be found in the Trust credentials page of the admin console.
IS SET and NOT SET device posture operators
- New: IS SET and NOT SET have been added as device posture operators.
India DERP Region City Name updated
- Changed: The city name for the DERP server hosted in India has been updated to reflect the official name of Bengaluru. The hosting provider and IP addresses remain unchanged.
Log streaming integration with Google Cloud Storage
- New: Tailscale network flow logs and configuration audit logs can be streamed to Google Cloud Storage (GCS).
Tailscale container image v1.94.1
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . New: OAuth and workload identity federation support has been added for containers.