CVE-2025-41112 is a high-severity lack of authorization vulnerability in CanalDenuncia.app. It allows attackers to access other users' information by exploiting a flaw in the '/backend/api/buscarConfiguracionParametros2.php' endpoint via the 'web' POST parameter. The vulnerability does not require privileges or user interaction and impacts confidentiality without affecting integrity or availability.