CVE-2025-41771 is a medium severity SQL injection vulnerability in a controller's web interface. An authenticated attacker with low privileges can exploit an endpoint that interacts with a SQLite database used solely for notification messages. The impact is limited to the notification functionality of the system, with no confidentiality or availability impact reported.