CVE-2025-56798

Unraid OS versions 6.12.14 and earlier are vulnerable to a Cross-Site Request Forgery (CSRF) attack that exploits a weak same-site policy for authentication cookies, potentially allowing remote attackers to escalate privileges. Organizations using affected versions of Unraid OS should prioritize addressing this vulnerability to prevent unauthorized access and potential compromise of their systems. Immediate action is recommended for those managing sensitive data or critical infrastructure within their Unraid environments.