Live › vulnerability › CVE-2026-107060
Tailscale versionCode 297862600 has insecure permissions that let an unauthorized attacker change another user's VPN configuration and preferences. The sources do not describe how the attacker reaches the device or whether an account is needed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 17:26 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.
This page as .md · .json · in your agent: get_signal("CVE-2026-107060")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.