This vulnerability in trinodb trino 481 involves an open redirect caused by improper validation or sanitization of the redirect_uri parameter in the OAuth2/OIDC component (file core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java). An attacker can remotely manipulate this parameter to redirect users to arbitrary external URLs. The project has been informed but has not issued a patch or official remediation at the time of this report.

Successful exploitation can lead to open redirect attacks, potentially facilitating phishing or redirecting users to malicious sites. There is no indication of privilege escalation or direct data compromise. The vulnerability requires user interaction (UI:P) and has low impact on confidentiality (VC:N) and integrity (VI:L).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround has been published, users should exercise caution when handling redirect_uri parameters and consider implementing external mitigations such as validating redirect targets at the application or proxy level until an official patch is available.