[GH-ISSUE #2170] Strange machine appeared in my device list #3287

New issue

Closed

opened 2026-03-14 07:02:54 +03:00 by kerem · 2 comments

kerem commented

2026-03-14 07:02:54 +03:00

Owner

Originally created by @WilliamKarvat on GitHub (Mar 14, 2025).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/2170

A computer appears as available in my Tactical, but I don't know which computer it is. We installed the agent via Windows GPO and there is no possibility that this computer is ours, the IP is completely different, and our equipment is all on the same network and all appear with the same IP. Is this a bug or did someone exploit a vulnerability?

Some information that may be relevant:

Our Tactical is accessible from any IP, we do not make any restrictions or external blocks.
We are using version 1.0.0.

Anyway, I don't think this could cause us any problems, but I wanted to understand what happened.

Originally created by @WilliamKarvat on GitHub (Mar 14, 2025). Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/2170 A computer appears as available in my Tactical, but I don't know which computer it is. We installed the agent via Windows GPO and there is no possibility that this computer is ours, the IP is completely different, and our equipment is all on the same network and all appear with the same IP. Is this a bug or did someone exploit a vulnerability? Some information that may be relevant: - Our Tactical is accessible from any IP, we do not make any restrictions or external blocks. - We are using version 1.0.0. Anyway, I don't think this could cause us any problems, but I wanted to understand what happened. ![Image](https://github.com/user-attachments/assets/aff8732a-a6c3-4739-93b3-968bd3eb8c7b)

kerem closed this issue

2026-03-14 07:03:00 +03:00

kerem commented

2026-03-14 07:03:05 +03:00

Author

Owner

@dinger1986 commented on GitHub (Mar 14, 2025):

https://docs.tacticalrmm.com/faq/#help-ive-been-hacked-and-there-are-weird-agents-appearing-in-my-tactical-rmm

@dinger1986 commented on GitHub (Mar 14, 2025): https://docs.tacticalrmm.com/faq/#help-ive-been-hacked-and-there-are-weird-agents-appearing-in-my-tactical-rmm

kerem commented

2026-03-14 07:03:10 +03:00

Author

Owner

@WilliamKarvat commented on GitHub (Mar 14, 2025):

That's it. We were messing with the antivirus policies and some machines complained about Tactical and something like that must have happened, Thanks.

@WilliamKarvat commented on GitHub (Mar 14, 2025): That's it. We were messing with the antivirus policies and some machines complained about Tactical and something like that must have happened, Thanks.