CVE-2025-8325 is a vulnerability in WSO2 API Manager 3.x where role-based access controls are not properly enforced for certain Gateway and Internal Service API invocations. Users assigned the 'Internal/Everyone' role can bypass intended permission checks and perform sensitive operations on the Gateway REST API regardless of their actual privileges. This flaw could lead to unauthorized actions and unintended behavior in affected deployments.