CVE-2025-67859: Https://github.com/linrunner Tlp

Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days.

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1.

Affected products

• Https://github.com/linrunner Tlp: from 1.9, before 1.9.1 (fixed in 1.9.1)

Published 2026-01-14. Last modified 2026-06-17.