CVE-2025-41345 is a lack of authorization vulnerability in CanalDenuncia.app that allows attackers to access other users' information by manipulating POST parameters 'id_denuncia' and 'id_user' in the endpoint '/backend/api/buscarDenunciasById.php'. This vulnerability has a high severity with a CVSS score of 7.5.