Ignite Realtime Openfire versions 4.8.0 and earlier contain a privilege escalation vulnerability via the admin.authorizedJIDs system property. This flaw allows a remote attacker with some level of privileges to escalate their access rights. The issue is fixed in version 4.8.1. Public exploit code is available through Metasploit, and the vulnerability is rated high severity with a CVSS score of 7.2.