{"id":"CVE-2026-107060","kind":"vulnerability","aliases":["CVE-2026-107060"],"related":[],"title":"Tailscale Android: insecure permissions let attackers change other users' VPN settings","description":"Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.","summary":"Tailscale versionCode 297862600 has insecure permissions that let an unauthorized attacker change another user's VPN configuration and preferences. The sources do not describe how the attacker reaches the device or whether an account is needed.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","other","tailscale"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-29T17:17:58+00:00","first_seen_at":"2026-10-29T17:26:17+00:00","triaged_at":"2026-10-29T17:27:59+00:00","updated_at":"2026-10-29T17:27:59+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-10-29T17:27:59Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Tailscale Android: insecure permissions let attackers change other users' VPN settings","impact":"medium","summary":"Tailscale versionCode 297862600 has insecure permissions that let an unauthorized attacker change another user's VPN configuration and preferences. The sources do not describe how the attacker reaches the device or whether an account is needed.","audience":"everyone","category":"other","nicknames":[],"who_cares":["tailscale","android"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker alters another user's VPN configuration and preferences","analyst_note":"Confirm the affected platform, the fixed Tailscale version and the attack prerequisites from the NVD entry or Tailscale's advisory.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000593,"input_tokens":4079,"output_tokens":371,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-107060':14A,17A '-2026':13A,16A '297862600':23B,62C 'account':54B 'allow':63C 'android':2A,18B 'anoth':33B,71C 'arbitrari':68C 'attack':6A,31B,47B,65C 'chang':7A,32B,69C 'configur':37B,75C 'cve':12A,15A 'describ':44B 'devic':50B 'insecur':3A,25B,57C 'let':5A,28B 'make':67C 'need':56B 'permiss':4A,26B,58C 'prefer':39B,77C 'reach':48B 'set':11A 'sourc':41B 'tailscal':1A,20B,21B,60C 'unauthor':30B,64C 'user':9A,34B,72C 'versioncod':22B,61C 'vpn':10A,36B,74C 'whether':52B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"first_public_at":"2026-10-29T17:17:58+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107060","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107060","severity":null,"published_at":"2026-10-29T17:17:58+00:00","modified_at":"2026-10-29T17:17:58+00:00","first_seen_at":"2026-10-29T17:26:17+00:00","fetched_at":"2026-10-29T17:26:17+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}