The vulnerability originates from the NoMachine nxhtd web service, which listens on UDP port 4443 by default, failing to validate a URI before accessing resources. This flaw allows a remote attacker to send a crafted request that compels the service to perform arbitrary outbound requests in the context of the service account. Authentication is not required, so any host that can reach the service can exploit it. The primary impact is that the attacker can cause the server to contact internal endpoints, potentially exposing sensitive data or internal services.

Any installation of NoMachine that has the nxhtd web service enabled and listening on UDP 4443 is affected. No specific version numbers are supplied, so all current deployments of NoMachine with that service active are potentially vulnerable. Administrators should locate all NoMachine servers that expose this port and assess their patch status.

The CVSS score of 7.2 indicates a high severity level. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, but the absence of authentication and the ability to access internal resources make it a significant risk. Attackers can exploit the flaw remotely by sending malformed requests to the exposed UDP port, forcing the server to reach any internal or external address specified by the attacker.