A server-side request forgery (SSRF) vulnerability exists in the Credential API of Synology DiskStation Manager (DSM) versions before 7.3.2-86009-5 and 7.4.1-90080-1. This flaw allows remote authenticated users to read specific files on the affected system. The vulnerability has a medium severity rating with a CVSS score of 4.3. No public exploit or known active exploitation is reported. No patch links are provided in the data, and the vendor advisory status is not confirmed.