A vulnerability identified as critical has been detected in jshERP 3.5. The affected element is an unknown function of the file controllerRoleController.java. Performing manipulation results in improper access controls.

This vulnerability is identified as CVE-2025-55368. The attack can be initiated remotely. There is not any exploit available.