CVE-2025-56798

Description

Cross-Site Request Forgery (CSRF) vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy.

References

• https://alittleinsecure.com/raiding-unraid/
• https://alittleinsecure.com/unraid-research/
• https://unraid.net/blog/cvd