CVE-2025-6018 is a Local Privilege Escalation vulnerability in the pam-config component of Linux Pluggable Authentication Modules (PAM). It allows an unprivileged local attacker, such as a user logged in via SSH, to gain elevated privileges normally reserved for physically present users with 'allow_active' status. This can enable the attacker to perform Polkit actions restricted to console users, potentially controlling system configurations and sensitive operations. Red Hat has stated that their Linux PAM distribution is not affected by this vulnerability. Currently, no mitigation or patch is available.