Releasesby GlyphTailscale v1.98.9
All Platforms Fixed: Tailscale Serve Unix socket proxy targets are restricted to the root user. This fix addresses a security vulnerability described in TS-2026-005 . Fixed: Tailscale SSH does not allow the use of UIDs or numeric-only usernames. This fix addresses a security vulnerability described in TS-2026-006 .
Also shipped Jul 14, 2026Tailscale in July 2026 →
Conversational analytics now supports the AI.AGG function
Conversational analytics now supports the AI.AGG function . This function is in Preview .
CREATE OR ALTER is generally available for 24 object types
CREATE OR ALTER is now generally available for 24 object types. CREATE OR ALTER creates an object if it doesn’t exist, or modifies an existing object to match the statement definition. It’s especially useful in declarative deployment workflows and CI/CD pipelines where the same script must be safe to re-run.
Catalog integration for Snowflake Postgres (General availability)
Catalog integrations for Snowflake Postgres are now generally available. A Snowflake Postgres catalog integration lets Snowflake automatically discover tables managed by a Snowflake Postgres instance and access them as read-only Apache Iceberg™ tables, using vended credentials so you don’t need to configure an external volume or manage storage credentials...
Allowlist partner platform IPs in context-based ingress control (Beta)
Context-based ingress control now supports Partner Platforms as a network source. Select a partner platform to allowlist the IPs that third-party apps use to connect to Databricks, including Power BI, Tableau Cloud, and dbt platform. Databricks manages and updates these IP lists automatically. See Network sources .
Trigger.AvailableNow support for OpenSharing streaming (GA)
Streaming reads from OpenSharing tables now support the Trigger.AvailableNow trigger. This trigger captures the shared table's current version when it starts, processes all available data across one or more micro-batches (honoring maxFilesPerTrigger and maxVersionsPerRpc ), and then stops, which is well suited to scheduled, batch-like incremental...
Admin API adds Claude Enterprise user management in beta
Claude Enterprise organizations can list and look up members, change roles, remove members, manage invites and groups, and read custom roles through the Admin API. Group and custom-role requests need the ce-user-management-2026-07-13 beta header.
More from TailscaleEvery Tailscale release →
Tailscale 1.98.9
Please refer to the changelog available at https://tailscale.com/changelog
Nested group support for synced groups
- New: Microsoft Entra ID and Google Workspace group sync includes members of nested groups.
Self-serve identity provider changes
- New: Users with the Owner role can switch their tailnet's identity provider from the admin console for supported providers ( beta ).
Admin console URL change
- Changed: The Tailscale admin console is now available at console.tailscale.com . Authentication continues to use login.tailscale.com , and requests to login.tailscale.com/admin/ automatically redirect to the new subdomain.
Tailscale v1.98.10
All Platforms Fixed: Tailscale SSH Unix socket forwarding respects symlink permissions. This fix addresses a security vulnerability described in TS-2026-004 . Fixed: Tailscale SSH performs additional checks to disallow UIDs and numeric-only usernames. This fix covers additional scenarios described in TS-2026-006 .
Tailscale 1.98.10
Please refer to the changelog available at https://tailscale.com/changelog
Device Provisioning with OAuth Apps
- New: Create and manage OAuth Apps for Device Provisoning with the Tailscale API (alpha) .
Tailscale 1.98.8
Please refer to the changelog available at https://tailscale.com/changelog