A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1.
CVSS 4.0MEDIUM 5.1·Local·No auth·No interaction·EPSS 0.00206·Published 2026-01-14·Fixed in 1.9.1CWE-287