A vulnerability marked as problematic has been reported in web2py up to 2.27.1-stable+timestamp.2023.11.16.08.03.57. Impacted is an unknown function. Performing a manipulation results in open redirect.

This vulnerability is identified as CVE-2026-25198. The attack can be initiated remotely. There is not any exploit available.

It is suggested to install a patch to address this issue.