The vulnerability is caused by an insecure permission configuration in the Tailscale Android application (versionCode 297862600). This flaw allows an attacker to write to another user’s shared preferences, which store VPN settings and preferences, without the user’s consent. As a result, an attacker could alter routing, DNS, or interface parameters of a VPN connection, potentially redirecting traffic or disrupting connectivity for the target user.

Only the Tailscale Android application at versionCode 297862600 is affected. Any device installing this build is vulnerable because the insecure permission lets the app modify shared preferences belonging to other users on the same device. No other products or versions are affected according to the advisory.

Exploitation requires the presence of the insecure permission on the vulnerable build; the attacker does not need root or special privileges beyond installing the app. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, indicating no known exploitation traffic yet. The CVSS score is not provided, but because the flaw permits unauthorized changes to VPN configuration it would have a high impact on confidentiality, integrity, and availability of the VPN service if successfully abused. The likely attack vector is local on the device, relying on the app’s ability to write to shared preferences that belong to other users.