The issue is the new security signature requirement in 2025. I knew they enabled it by default in 2025, but I thought I had already disabled it. Apparently, I hadn't.
Set-SmbClientConfiguration -RequireSecuritySignature $false
You can also disable it via GPO by setting the "Microsoft network client: Digitally sign communications (always)" option to disabled in the security settings.