CVE-2025-41707 is a medium severity vulnerability affecting a websocket handler that allows an unauthenticated remote attacker to cause a denial of service (DoS) condition by sending a crafted websocket message. The attack does not impact the core functionality beyond causing the DoS.