Releasesby GlyphTailscale v1.102.3
All Platforms Changed: Go is updated to version 1.26.6. Fixed: Tailscale refuses host-scoped IPv4 destinations at every point that acts on an unmapped 4via6 address. This fix addresses a security vulnerability described in TS-2026-011 . Fixed: When MagicDNS is disabled, unqualified hostnames are correctly forwarded to the configured nameservers.
Also shipped Aug 19, 2026Tailscale in August 2026 →
Data movement policies (General availability)
With this release, data movement policies are now generally available for Enterprise Edition (or higher). Data movement policies are part of Snowflake’s data exfiltration protection controls. These SQL-style conditional policies can help you limit, alert on, or block data movement operations based on specific movement types.
Organization Features in Organization Command Center (Preview)
Organization Features is now in preview in Organization Command Center. From the organization account, a user with the GLOBALORGADMIN role can open Organization Hub » Command center , then the Organization Features tile, to see which organization-level capabilities are enabled. In preview, the main control is premium views for cross-account telemetry.
Organization Command Center 3rd party access configuration (Preview)
3rd party access configuration is now in preview in Organization Command Center. From the organization account, a user with the GLOBALORGADMIN role can open Organization Hub » Command center , then the 3rd party access configuration tile, to classify member accounts as internal or external, set the default tenant type for new accounts, and maintain allowed...
Role-based access control (RBAC) is generally available
Role-based access control (RBAC) is now generally available. RBAC lets users assume a role in Databricks. When a user assumes a role, only that role's permissions apply, rather than the user's accumulated permissions. This enables exclusive access.
ai_extract precision mode is now generally available
You can now use ai_extract precision mode for advanced extraction workloads, including multi-page documents, schemas with 50 or more fields, many extracted items per document, and complex conditional field logic. See ai_extract function .
[Launched] Generally Available: Azure Databricks Lakebase in four additional regions
Lakebase is now generally available in four additional Azure regions: North Central US, France Central, Germany West Central, and East Asia. This expansion provides customers with additional deployment options and broader regional availability for Lakebas
More from TailscaleEvery Tailscale release →
Tailscale container image v1.102.3
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . New: The container waits longer for its initial connection to the coordination server when you set the new TS_BOOT_TIMEOUT environment variable. It accepts a duration, such as 90s or 3m , and defaults to 60s .
Tailscale Kubernetes Operator v1.102.3
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . Fixed: Peer relays on AWS are reachable regardless of the availability zone their pod is scheduled in. Pinning Elastic IPs also requires pinning the pods to the same zone using a ProxyClass .
Tailscale 1.102.3
Please refer to the changelog available at https://tailscale.com/changelog
Tailnet list API pagination
- Changed: The list tailnets endpoint paginates results. By default, organizations with more than 100 tailnets now receive only the first 100 results, with totalCount and cursor parameters to retrieve additional results. New: limit and cursor query parameters are supported on the list tailnets endpoint.
Aperture by Tailscale GA
Use Aperture ( generally available ) to secure and manage AI agents and LLM sessions with cost controls, request and response hooks, guardrails, logging, MCP support, and API proxying. New: A promotional model token credit is included for use with new and existing Aperture gateways.
Tailscale PAM
Use Tailscale Privileged Access Management (PAM) ( beta ) to provide application-aware access to resources in your Tailscale network. New: Services can be defined for privileged access, including SSH , database , RDP , HTTPS , Kubernetes , and Amazon S3 types. New: Sessions can be recorded for SSH, database, HTTPS, and Kubernetes Service types.
Tailscale Kubernetes Operator v1.102.2
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . New: PeerRelays are deployable in-cluster via a custom resource . New: Annotations can now be applied to the operator's deployment resource via Helm.
Tailscale container image v1.102.2
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . This version contains no changes except for library updates.