· Rolling our Roon Server Software on Nucleus One with updated Tailscale software
Tell us about your home network
· We operate a Nucleus One and use Tailscale to access the roon server from ARC. But the pre-installed Tailscale on the Nucleus One is outdated, associated with a security vulnerability (see screenshot), and not at the most recent (stable) version. Please, when rolling out Roon Server Software on the Nucleus, provide an updated Tailscale (as it is pre-installed). This helps prevent security issues with the Roon infrastructure. MANY THANKS!
See the existing threads about this. The security vulnerability does not affect RoonOS (Nucleus, ROCK) because it is very specific and RoonOS does not run Tailscale in the vulnerable mode. Roon Labs does monitor Tailscale security announcements and will update it if necessary.
In any case, to alleviate user concerns, the upcoming new RoonOS 3.0 will have a Tailscale update facility included.
Thank you for raising this - it’s a valid concern and we appreciate the attention to security.
On Nucleus and ROCK, Tailscale comes pre-installed as part of RoonOS, and its version is tied to the RoonOS release. This means Tailscale cannot be updated independently - it is updated together with RoonOS when we release a new version.
Regarding the specific vulnerability flagged in your Tailscale admin console: based on the current security bulletins, the vulnerability affecting versions between 1.56.0 and 1.98.0 (TS-2026-002) requires the Tailscale web interface to be explicitly enabled on the node. Since RoonOS does not expose the Tailscale web interface, this particular vulnerability does not apply to Nucleus One.
That said, we have noted your feedback and will pass it along to our team.
Thank you again for taking the time to report this!
