Privilege Escalation Vulnerability in FreeIPA Project by Red Hat
CVE-2025-4404

9.1CRITICAL

Key Information:

Status: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8
Vendor: CVE Published:; 17 June 2025

What is CVE-2025-4404?

A vulnerability in the FreeIPA project allows attackers to exploit the lack of uniqueness validation for the krbCanonicalName associated with the admin account. This flaw enables the creation of service accounts with identical canonical names as the REALM admin. An attacker who successfully exploits this vulnerability can acquire a Kerberos ticket linked to this service, which contains the administrative credentials. Consequently, they could perform unauthorized administrative actions within the REALM, leading to potential access and exfiltration of sensitive data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch