A vulnerability described as critical has been identified in Itflow up to 25.06. Affected is an unknown function. Such manipulation of the argument role_id leads to sql injection.

This vulnerability is listed as CVE-2025-67081. The attack may be performed from remote. There is no available exploit.