CVE-2025-41335 is a lack of authorization vulnerability in CanalDenuncia.app that allows attackers to access other users' information by manipulating POST parameters 'id' and 'id_sociedad' in the '/api/buscarEmpresaById.php' endpoint. This vulnerability has a high severity score of 7.5 and does not require authentication or user interaction to exploit.