Linux Battery Utility Flaw Lets Hackers Bypass Authentication and Tamper System Settings

Cybersecuritynews •Abinaya • January 8, 2026

A critical security vulnerability has been discovered in TLP, a widely used Linux laptop battery optimization utility, allowing local attackers to bypass authentication controls and manipulate system power settings without authorization. Security researchers from openSUSE identified a severe authentication bypass flaw in the power profiles daemon in TLP version 1.9.0, tracked as CVE-2025-67859. The vulnerability exploits […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Linux Battery Utility Flaw Enables Authentication Bypass and System Tampering A critical vulnerability in TLP, a Linux battery optimization utility, allows local attackers to bypass authentication controls and alter system power settings. Discovered by security researchers from openSUSE, this flaw affects TLP version 1.9.0 and is tracked as CVE-2025-67859. 3 sources 35

Extracted Entities

Linux Battery Utility Flaw Lets Hackers Bypass Authentication and Tamper System Settings

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (2)