CVE-2025-56798

Description

Cross-Site Request Forgery (CSRF) vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy.

References

https://unraid.net/blog/cvd

https://alittleinsecure.com/unraid-research/

https://alittleinsecure.com/raiding-unraid/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS