Description (CNA)
A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| https://github.com/linrunner / TLP | affected 1.9 before 1.9.1 |
CWE
CWE-287
References
- https://security.opensuse.org/2026/01/07/tlp-polkit-authentication-bypass.html
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-67859
ADP enrichment
No English description supplied.
No references supplied.