Authenticated users of Microsoft UFO can exploit the /api/devices endpoint to supply a malicious WebSocket URL. The framework only pins the initial connection target, so the built‑in client follows cross‑origin HTTP redirects and opens a second TCP connection before Galaxy performs its peer‑IP validation. This permits the attacker to initiate a WebSocket upgrade to any internal host reachable from the server, with the side‑effect of a successful internal handshake but without exfiltration of HTTP payloads or cloud metadata access. The flaw is classified as a Server‑Side Request Forgery (CWE‑918).

The vulnerability exists in Microsoft UFO versions older than 3.0.9. Any deployment of the open‑source framework that allows authenticated Galaxy device registration is susceptible, regardless of operating system or runtime environment. The issue is fixed in release 3.0.9 and later.

The CVSS score of 6.4 indicates moderate severity; the EPSS score is unavailable, so the likelihood of widespread exploitation is uncertain. Since the attack requires authenticated access to /api/devices, an attacker must already have valid credentials or be able to compromise a device registration flow. The vulnerability is not listed in the CISA KEV catalog, and no public exploits have been reported, but the potential to reach sensitive internal services warrants careful mitigation.