CVE-2025-3985 is a low severity vulnerability in Apereo CAS version 5.2.6 and earlier. It involves inefficient regular expression complexity in the ResponseEntity function of the cas-management-webapp-support component. This flaw can be triggered remotely by manipulating the Query argument, potentially causing a denial of service due to resource exhaustion. The vulnerability has been publicly disclosed, but no patch or vendor response is currently available.