CVE-2025-41735 is a high-severity vulnerability that allows a low privileged remote attacker to upload arbitrary files to any location on the affected system due to a missing file validation check. This flaw can lead to remote code execution, compromising confidentiality, integrity, and availability.