SolarWinds Observability Self-Hosted has an open redirection vulnerability (CVE-2025-40545) where the URL is not properly sanitized, allowing an attacker with authentication to redirect users to malicious sites. The attack requires high complexity and low privileges, with no user interaction needed. The vulnerability has a medium severity rating.