A security flaw in maotoumao MusicFreeDesktop versions 0.0.6, 0.0.7, and 0.0.8 affects the Request Forwarder component, allowing information disclosure. The vulnerability can only be exploited from the local network. Public exploit code is available, but the vendor has not yet responded or issued a fix. The CVSS score is 4.3, indicating medium severity.