Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-4975

Tapo privilege escalation on shared devices using notifications

Description

When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TP-Link Systems Inc. TP-Link Tapo app

Default version status: unknown

  • 0 to < 3.10.513affected

References