A vulnerability was found in Smallsrv Small HTTP 3.06.36. It has been declared as critical. The affected element is an unknown function. Executing a manipulation can lead to improper access controls.

This vulnerability is registered as CVE-2025-41368. The attack needs to be launched locally. No exploit is available.