diff --git a/apps/registry.json b/apps/registry.json
index 1299725..0cca9b4 100644
--- a/apps/registry.json
+++ b/apps/registry.json
@@ -927,7 +927,7 @@
         "id": "tailscale",
         "category": "Networking",
         "name": "Tailscale",
-        "version": "1.20.2",
+        "version": "1.22.1",
         "tagline": "Zero config VPN to access your Umbrel from anywhere",
         "description": "Tailscale is zero config VPN that creates a secure network between your Umbrel and your other devices. Even when separated by firewalls or subnets, Tailscale just works.\n\nTailscale will assign your Umbrel a stable IP and an auto-assigned domain that stays consistent, no matter what network your Umbrel is connected to. It’s like a local network that works everywhere.\n\nTailscale builds on top of WireGuard®’s Noise protocol encryption, a peer-reviewed and trusted standard.",
         "developer": "Tailscale Inc.",
diff --git a/apps/tailscale/docker-compose.yml b/apps/tailscale/docker-compose.yml
index b630900..9827a3c 100644
--- a/apps/tailscale/docker-compose.yml
+++ b/apps/tailscale/docker-compose.yml
@@ -3,7 +3,7 @@ version: "3.7"
 services:
   web:
     network_mode: "host" # TODO: We can remove this later with some iptables magic
-    image: tailscale/tailscale:v1.20.2@sha256:ce7d5663390a170eb9f05789c00b069a2cd3cea185ce15231e9f77ad8d016d49
+    image: tailscale/tailscale:v1.22.1@sha256:a8f3198bccfb3d281735cd99f33537c4023fd18d7aa4bce36cdaa827b1124ba0
     restart: on-failure
     stop_grace_period: 1m
     command: "sh -c 'tailscale web --listen 0.0.0.0:${APP_TAILSCALE_PORT} & exec tailscaled --tun=userspace-networking'"