CVE-2025-41336 is a lack of authorization vulnerability in CanalDenuncia.app that allows attackers to access other users' information by sending a crafted POST request to the 'web' parameter in the '/backend/api/buscarConfiguracionParametros.php' endpoint. This vulnerability has a high severity score of 7.5 and affects confidentiality without impacting integrity or availability.