# Tailscale Security Vulnerablity

**URL:** <https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564>\
**Category:** Router\
**Created:** [January 20, 2024, 8:35pm UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564 "2024-01-20T20:35:52Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![aaylnx](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/2acd7d/32.png) [@aaylnx](https://forum.gl-inet.com/u/aaylnx)\
**Post date:** [January 20, 2024, 8:35pm UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/1 "2024-01-20T20:35:52Z")

</div>

I am using Tailcale on my Flint 2. Today, when I logged into the Tailscale Admin Console, I saw a red arrow by instance of Tailscale installed on the Flint 2. When I hovered over the arrow the following message popped up

> This machine is running a version with a known security vulnerability. It’s recommended to update to 1.58.0.  
> Follow these instructions to update this machine.

The version running on Flint 2 is 1.32.2-dev-t.

Do you know the nature of this security vulnerability? Also, is there a way to update to a newer version?

---

<div class="post-metadata">

**Author:** ![mainufer](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/mainufer/32/5948_2.png) [@mainufer](https://forum.gl-inet.com/u/mainufer)\
**Post date:** [January 21, 2024, 9:57am UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/2 "2024-01-21T09:57:05Z")

</div>

I believe this should answer your questions:

> **[Tailscale](https://openwrt.org/docs/guide-user/services/vpn/tailscale/start)**
>
> Tailscale Tailscale creates a virtual network between hosts. It can be used as a simple mechanism to allow remote administration without port forwarding or even be configured to allow peers in your virtual network to proxy traffic through connected...

Besides that, I believe the tailscale forum is of more help:

> **[Tailscale](https://forum.tailscale.com/)**
>
> Developer coffeehouse and help desk

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [January 21, 2024, 11:23am UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/3 "2024-01-21T11:23:13Z")

</div>

@aaylnx If you don't mind testing, feel free!

> [@Script: Update Tailscale on (nearly) all devices](https://forum.gl-inet.com/t/how-to-update-tailscale-on-arm64-f-e-flint2/37582):
>
> Hi there wave Many people wonder how to update the pretty old Tailscale version on GL.iNet routers like the Flint, Flint2, or even the new Flint 3 (GL-BE9300). For your convenience, I created a script to automate this entire process. [ssh2] Key Featuressparkles Automatic Updates - The script fetches and installs the latest Tailscale version automaticallypackage Tiny Version Support - Uses optimized tiny binaries to save precious storage spacebullseye Version Selection - Want a spe…

---

<div class="post-metadata">

**Author:** ![Almahadeus](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/a698b9/32.png) [@Almahadeus](https://forum.gl-inet.com/u/Almahadeus)\
**Post date:** [January 21, 2024, 11:46am UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/4 "2024-01-21T11:46:00Z")

</div>

Seems to be working just fine. Good job. Thanks.

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [January 21, 2024, 12:34pm UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/5 "2024-01-21T12:34:42Z")

</div>

Thanks for the feedback, glad it worked!

---

<div class="post-metadata">

**Author:** ![Steve68](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/bc79bd/32.png) [@Steve68](https://forum.gl-inet.com/u/Steve68)\
**Post date:** [January 21, 2024, 3:08pm UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/6 "2024-01-21T15:08:01Z")

</div>

I updated the Tailscale packages through the GL.iNET and it worked! BUT… there is a bug, sometimes when I turn off the Tailscale function on the GL.iNET Web UI, it doesn’t actually turn off and the router keeps connected to Tailscale, and if you turn it off and reboot the router it connects again to Tailscale (having the toggle turned off). I had to turn it off using SSH and it seems to be okay now, now it keeps turned of if I reboot the router

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [January 21, 2024, 4:04pm UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/7 "2024-01-21T16:04:34Z")

</div>

How did you turn it off using SSH?

---

<div class="post-metadata">

**Author:** ![Steve68](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/bc79bd/32.png) [@Steve68](https://forum.gl-inet.com/u/Steve68)\
**Post date:** [January 21, 2024, 6:05pm UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/8 "2024-01-21T18:05:42Z")

</div>

Entering the command: **tailscale down** and then to see if it’s down: **tailscale status**  
You can enable it with: **tailscale up**  
If you just enter **tailscale** it will show you the list with all the commands.  
Keep in mind this happened after I updated the Tailscale packages, when it had the old package it was working fine when I turn it off, but of course an old version with a vulnerability, now I’ll try to test if the Beryl AX works as exit node, so all the traffic goes encrypted to my house like a normal VPN server/client, I’ll need to use SSH as well because on the GL.iNET Web UI it doesn’t work

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [January 21, 2024, 6:48pm UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/9 "2024-01-21T18:48:09Z")

</div>

> [@Steve68](#):
>
> I’ll need to use SSH as well because on the GL.iNET Web UI it doesn’t work

You can’t turn it on/off using the UI?

---

<div class="post-metadata">

**Author:** ![Steve68](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/bc79bd/32.png) [@Steve68](https://forum.gl-inet.com/u/Steve68)\
**Post date:** [January 21, 2024, 8:17pm UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/10 "2024-01-21T20:17:56Z")

</div>

When I turn on the exit node option on the GL.iNET web I can’t select the destination IP for the node, so it’s not working if I hit apply, but it’s possible using SSH, I will try as soon as I can, it might be because I updated Tailscale 🤔I tested on my PC yesterday and it worked as an exit node, the router needs to be set as exit node so that way the option for exit node can be manually enabled on Tailscale

---

<div class="post-metadata">

**Author:** ![aaylnx](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/2acd7d/32.png) [@aaylnx](https://forum.gl-inet.com/u/aaylnx)\
**Post date:** [January 22, 2024, 11:21pm UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/11 "2024-01-22T23:21:57Z")

</div>

Thanks for the script. It works, but I needed to reboot before it registered the updated version.

---

<div class="post-metadata">

**Author:** ![aaylnx](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/2acd7d/32.png) [@aaylnx](https://forum.gl-inet.com/u/aaylnx)\
**Post date:** [January 23, 2024, 10:10pm UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/12 "2024-01-23T22:10:42Z")

</div>

In addition to my last post, when I accepted a router update yesterday, tailscale was reset to the previous version. It’s not a real problem since I can just download and reinstall, but hopefully they get an updated version soon.

---

<div class="post-metadata">

**Author:** ![aaylnx](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/2acd7d/32.png) [@aaylnx](https://forum.gl-inet.com/u/aaylnx)\
**Post date:** [January 23, 2024, 10:35pm UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/13 "2024-01-23T22:35:53Z")

</div>

I was mistaken. For some reason this script is not updating things for me. If I download the tailscale and tailscaled binaries manually and replace the old ones with the new ones, that works.

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [January 24, 2024, 5:42am UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/14 "2024-01-24T05:42:21Z")

</div>

What router do you use?

---

<div class="post-metadata">

**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\
**Post date:** [October 29, 2025, 11:36am UTC](https://forum.gl-inet.com/t/tailscale-security-vulnerablity/37564/15 "2025-10-29T11:36:08Z")

</div>


