The vulnerability identified as CVE-2026-39600 affects Mehul Gohil Aculect AI Companion up to version 0.8.1. It is an Open Redirect issue where the application improperly validates URLs, allowing redirection to untrusted sites. This can be exploited to conduct phishing attacks by redirecting users to malicious domains. The CVSS 3.1 base score is 4.7, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low confidentiality impact.

The primary impact is the potential for phishing attacks through redirection of users to malicious external websites. There is no direct impact on system integrity or availability. Confidentiality impact is low as per CVSS metrics. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users and administrators should be cautious of suspicious links originating from the affected application. No official fix or workaround information is provided in the current data.