A vulnerability described as critical has been identified in Siemens SIMATIC Virtualization as a Service. This affects an unknown function. Executing manipulation can lead to incorrect permission assignment.

This vulnerability appears as CVE-2025-40804. The attack may be performed from remote. There is no available exploit.