Byaidu PDFMathTranslate version 1.9.9 contains an open redirect vulnerability in the /gradio_api endpoint via the file parameter. This flaw allows attackers to craft URLs that redirect users to arbitrary external websites, potentially facilitating phishing attacks or bypassing security filters. The vulnerability has a medium severity with a CVSS score of 5.1. No patch or official fix is currently documented.