CVE-2024-49363 is a denial-of-service vulnerability in the Misskey federated social media platform. Specifically, versions 2024.10.1 and earlier of Misskey's FileServerService (media proxy) are susceptible to self-propagating reflected/amplified DDoS attacks. The vulnerability arises from the service's failure to detect proxy loops. This allows attackers to craft malicious notes that trigger unbounded recursion through nested proxy requests, overwhelming the server until the original request times out. With an SVRS score of 30, while not critical, this vulnerability still presents a risk, particularly if exploited in conjunction with other vulnerabilities. Users are advised to upgrade to version 2024.11.0-alpha.3 or implement reverse proxy configurations to mitigate the risk. The vulnerability is classified as CWE-405, Resource Leak, further highlighting the potential for resource exhaustion and service disruption.