Privilege Escalation Vulnerability in FreeIPA Affected by Red Hat
CVE-2025-7493

9.1CRITICAL

Key Information:

Vendor: Red Hat
Status: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 8.2 Advanced Update Support
Vendor: CVE Published:; 30 September 2025

What is CVE-2025-7493?

A vulnerability has been discovered in FreeIPA that allows an attacker to escalate privileges from host to domain administrator. This flaw arises from an improper validation of krbCanonicalName uniqueness. Although previous versions introduced validations for the admin@REALM credential, the critical validation for root@REALM remains unaddressed, exposing the realm administrator's name to potential exploitation. As a consequence, this issue could permit an attacker to execute administrative tasks across the REALM, facilitating access to sensitive data and risking data exfiltration.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch