CVE-2025-69725 is an Open Redirect vulnerability in the go-chi/chi web framework affecting versions 5.2.2 and later. The issue resides in the RedirectSlashes function, which improperly handles URL redirection, enabling attackers to redirect users to arbitrary external sites under the guise of the legitimate domain. This can be exploited to facilitate phishing or other social engineering attacks by leveraging user trust in the original domain. The vulnerability has a CVSS 3.1 base score of 4.7, indicating medium severity. There is no information about available patches or vendor advisories for this issue.

The vulnerability allows remote attackers to redirect users of affected go-chi/chi applications to malicious websites using the legitimate domain. This can lead to phishing attacks or user deception but does not directly impact confidentiality or integrity of the affected system. The impact is limited to user trust and potential social engineering exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing additional validation on redirects or avoid relying on the vulnerable RedirectSlashes function for critical redirection logic.