CVE-2025-4975: TP-Link Systems Inc TP-Link Tapo App

Medium severity, CVSS 4.8. EPSS: 0.1% chance of exploitation in the next 30 days.

When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device.

Affected products

• TP-Link Systems Inc TP-Link Tapo App: before 3.10.513 (fixed in 3.10.513)

Published 2025-05-22. Last modified 2026-06-17.