CVE-2025-7493 is a privilege escalation vulnerability in FreeIPA's Identity Management component within Red Hat Enterprise Linux 9 and associated CodeReady Linux Builder variants. The flaw allows an attacker with host-level access to escalate privileges to domain administrator level. Red Hat has released an important security update (RHSA-2025:17084) that fixes this issue. The advisory covers multiple architectures including x86_64, s390x, ppc64le, and aarch64. No known exploits in the wild have been reported. The vendor advisory provides detailed package updates and instructions for remediation.

Successful exploitation of this vulnerability allows an attacker with host access to gain domain administrator privileges, significantly increasing their control over the affected environment. This could lead to unauthorized access to sensitive identity and authentication data, and potentially full compromise of the domain managed by FreeIPA. The vulnerability is rated as high severity by Red Hat Product Security.

Red Hat has released an official security update (RHSA-2025:17084) that addresses this privilege escalation vulnerability. Administrators should apply the provided updates for Red Hat Enterprise Linux 9 and related CodeReady Linux Builder packages as detailed in the vendor advisory. Patch status is confirmed as available. No additional mitigation steps are indicated beyond applying the official update.