VPN Patch Watch: NordVPN 6.0 Lands on Linux, Windows’ Always On VPN Bug Lingers, Tailscale Ships Again

Most VPN headlines are about governments and courts. This one is about something quieter and more useful to your daily life: the software itself. A VPN is only as trustworthy as the app on your device, and October brought a small cluster of updates, bugs and fixes worth knowing about. Think of this as a pit-lane report for your privacy tools.

We went through the month’s product developments and pulled out what a normal person actually needs to know: what changed, why it matters, and what to do about it. If terms like “kernel” or “obfuscation” make your eyes glaze over, relax. Each one gets a plain-language explanation along the way.

01  NordVPN 6.0 lands on Linux: faster, tidier, and a little disruptive

Linux users have long had a complicated relationship with commercial VPNs. The apps often trail behind their Windows and Mac cousins, command-line tools change without much warning, and speed varies with the version of the operating system underneath. That is why NordVPN’s 6.0.0 release for Linux, published on October 22, 2026, drew attention. Reporting on the release highlights three changes: a refresh of the obfuscation techniques, better OpenVPN performance on newer kernels, and the removal of several legacy commands. Coverage also points to peer-to-peer support on every server and a leaner command set.

The retirement of legacy commands deserves a careful read. Cleaning house makes the tool simpler, but if you have scripts that call older commands, such as a startup script that connects to a particular server, an update can quietly break them. Before upgrading a machine you rely on, skim the command list, test on a spare device, and update your scripts in the same sitting. A tidy tool is great until your automation depends on the clutter.

For most home users the practical advice is simple: update, then confirm that your usual connection method still works. For anyone who runs VPN scripts on a server or a media box, give yourself ten minutes to test before you walk away. Independent testing outlets have also noted that OpenVPN speeds vary widely by provider, so do not expect the gain to look identical on every machine.

02  Windows 11’s Always On VPN bug: the fix that wasn’t

Now to the less cheerful item. Microsoft has confirmed that connection issues affecting the Windows 11 “Always On VPN” feature are still unresolved. The trouble first appeared in September, and the company acknowledged that the problem was mistakenly flagged as resolved in the October 13 patch. In other words, some administrators who installed the update expecting relief did not get it.

Always On VPN is a Windows feature aimed largely at organizations. Instead of asking an employee to click “connect,” it keeps a secure link to the company network alive automatically, so a laptop behaves as if it never left the office. When it breaks, people lose access to internal tools, shared drives and company websites without any obvious reason. It is a bit like a self-locking door that sometimes forgets it has a key.

If you use a consumer VPN from a provider such as NordVPN, Proton or Surfshark, this particular bug is probably not your problem. It concerns the built-in Windows feature rather than third-party apps. Still, it is a handy reminder that a connection can fail for reasons that have nothing to do with the VPN company you pay.

03  A “clumsy” Windows flaw gets patched

Security coverage this month also flagged that NordVPN patched a Windows bug that let attackers disable system services. The article characterized the flaw as clumsy, which in security language usually means it was an oversight in how the app handled permissions or processes rather than a sophisticated, exotic exploit. We should be honest about what is known here: the public summary is short, and we have not independently verified technical details such as a CVE number or which versions were affected. What we can say is the actionable part. If you use NordVPN on Windows, confirm that the app is on its latest version.

Why does this kind of story matter for ordinary users? A VPN app usually runs with elevated privileges because it needs to create network adapters and change routing. That power is the very thing an attacker wants to borrow. When a flaw lets someone stop important services, even without stealing data, it can weaken protections or make a machine behave unpredictably. VPN vendors are not unusually sloppy, since the same class of bug appears in countless programs, but the high privileges make prompt patching more valuable than it is for a calculator app.

A VPN app is a locksmith you hand your keys to. You want one who also changes his own locks.

— Coedee Team

04  Tailscale 1.104.2: the quiet metronome

Not every VPN fits the “pick a country and click connect” mold. Tailscale builds a software-defined mesh network on the WireGuard protocol, linking your own devices, such as a laptop, a home server and a phone, into one private network as if they sat on the same desk. Its 1.104.2 release landed on October 20, 2026, according to the project’s release information.

Releases like this rarely make headlines, yet they are what a healthy security product looks like. A steady rhythm of small, frequent updates means bugs get fixed quickly instead of piling up. If you use Tailscale for remote access to a home lab or a small office, make sure automatic updates are enabled, and skim the notes when something looks relevant. Mesh tools sit inside your private network, so an out-of-date client is a bigger risk than an out-of-date game.

05  Around the industry: reach, roadmaps and reality checks

A few other threads from this month’s coverage are worth a mention. ExpressVPN has announced an upgrade to its server network, now advertising 113 countries and 214 selectable server locations. As with every headline number in this industry, treat it as a starting point. Tom’s Guide has previously noted that some server-count claims are inflated by virtual locations, which means a server labelled as being in one country may physically sit in another. If your goal is to appear in a specific place, or to avoid a specific jurisdiction, ask the provider whether the location is physical or virtual.

Proton’s CEO has said the company plans an all-new, in-house VPN architecture as part of its roadmap, which, if delivered, would give the privacy-focused provider more control over its own stack. Independent reviewers also noted improvements in Proton and ExpressVPN speeds in the latest tests, with both peaking above 1,400 Mbps in lab conditions. Lab numbers are not what you will see on a coffee-shop connection, but they do show that the gap in raw speed between top services is narrowing.

Third-party audits remain the strongest signal of trust. The same roundup remarked that Surfshark has been more diligent about independent audits recently, a notable change for a provider previously seen as lagging rivals in that area. A security audit is like a health inspection for a restaurant. It does not guarantee a flawless kitchen forever, but it beats a promise written on the menu.

06  A 5-minute update routine you can actually keep

Software maintenance is the least glamorous part of privacy, which is exactly why it gets neglected. Here is a routine that takes about five minutes a month, and costs nothing.