An open redirect vulnerability occurs when a web application redirects users to a URL specified by user-controlled input without proper validation or sanitization. This can be exploited for phishing attacks, malware distribution, and credential theft. Attackers can craft URLs that appear legitimate but redirect users to malicious sites, leading to significant security risks.

An attacker crafts a URL that includes a redirect to a malicious website. The attacker then sends this URL to potential victims via email or social media. When a victim clicks on the link, they are redirected to the attacker's site, which could be a phishing page designed to steal credentials or a site that distributes malware.

Users of the software running Release v0.2.36 who access URLs provided by untrusted sources are affected by this vulnerability.