CVE-2026-107060
Description
A flaw was found in Tailscale. Insecure permissions allow an unauthorized attacker to make arbitrary modifications to another user's Virtual Private Network (VPN) configurations and preferences. An attacker could exploit this issue to alter network routing and connection settings without proper authorization.
Statement
This vulnerability is rated as having Moderate impact because exploitation requires local access on an affected endpoint to modify VPN connection preferences and route parameters. Tailscale client software is not included or supported within Red Hat Enterprise Linux or other Red Hat enterprise offerings. As a result, default Red Hat deployments are not exposed to this flaw.
Understanding the Weakness (CWE)
Confidentiality,Integrity
Technical Impact: Read Application Data; Modify Application Data
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
