The KDE Terminal emulator 'konsole' in Red Hat Enterprise Linux 7 Extended Lifecycle Support contains a remote code execution vulnerability identified as CVE-2025-49091. This vulnerability allows an attacker to execute arbitrary code remotely. Red Hat Product Security has released an update (konsole-4.10.5-5.el7_9.1) to fix this issue. The advisory RHSA-2025:12346 provides details on the affected architectures and packages. No CVSS score is provided in the advisory, but the issue is rated as important. The vulnerability is tracked under CWE-670.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely on affected systems running the vulnerable konsole package. This could lead to unauthorized control or compromise of the affected system. The advisory rates the security impact as important, indicating a high risk to affected systems if unpatched.

Red Hat has released an official security update for konsole in Red Hat Enterprise Linux 7 Extended Lifecycle Support. Users should apply the update konsole-4.10.5-5.el7_9.1 or later as provided by Red Hat to remediate this vulnerability. Refer to Red Hat's official advisory RHSA-2025:12346 and the article https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigation steps are indicated or required beyond applying the official patch.