CVE-2025-67859
Polkit Authorization Check can be Bypassed in the TLP power daemon
A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1.
CVSS 4.0 · 5.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products