Critical · 9.1 CVE-2026-107060 EUVD-2026-113254GHSA-22cw-3xwj-68cg

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN confi…

Published Oct 29, 2026 · Updated Oct 30, 2026 · Assigned by mitre

Description

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.

References

https://f-droid.org/packages/com.tailscale.ipn/
https://github.com/tailscale/tailscale
https://tailscale.com/security-bulletins
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107060.md