diff --git a/tailnet/conn.go b/tailnet/conn.go
index bbe0b3a531117..363ccb80ff48c 100644
--- a/tailnet/conn.go
+++ b/tailnet/conn.go
@@ -709,9 +709,11 @@ func (c *Conn) selfNode() *Node {
 		DERPLatency:         derpLatency,
 		DERPForcedWebsocket: derpForcedWebsocket,
 	}
+	c.mutex.Lock()
 	if c.blockEndpoints {
 		node.Endpoints = nil
 	}
+	c.mutex.Unlock()
 	return node
 }