CVE-2025-41340 is a lack of authorization vulnerability in CanalDenuncia.app that allows attackers to access other users' information by manipulating POST parameters in a specific API endpoint. The vulnerability affects the endpoint '/backend/api/buscarTipoDenunciabyId.php' via the 'id_tp_denuncia' and 'id_sociedad' parameters. It has a high severity with a CVSS score of 7.5.