CVE-2025-7406 describes a privilege escalation vulnerability in Nokia MantaRay NM where a local attacker who already has administrative (local admin) privileges can escalate to full root privileges by exploiting sudo misconfigurations or weaknesses. This vulnerability enables the attacker to gain root-level access to the filesystem and execute arbitrary commands with root privileges. The vulnerability is classified under CWE-269 (Improper Privilege Management). There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

Successful exploitation grants an attacker with local administrative privileges full root access on the host system, allowing complete control over the filesystem and execution of any commands as root. This elevates the attacker's capabilities significantly, potentially compromising system integrity, confidentiality, and availability.

Currently, no official patch or fix has been confirmed by the vendor. A temporary mitigation is to restrict the set of commands permitted via sudo for affected accounts to limit the potential for privilege escalation. Users should monitor the vendor's advisory for updates and apply official patches once available.