Unrated severityNVD Advisory· Published Aug 26, 2026

CVE-2025-56798

Description

Cross-Site Request Forgery (CSRF) vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy.

Affected products

Lime Technology, Inc./Unraid OSllm-create
Range: <=6.12.14
Unraid/Unraidllm-fuzzy
Range: <=6.12.14

Patches

Vulnerability mechanics

References

alittleinsecure.com/raiding-unraid/nvd
alittleinsecure.com/unraid-research/nvd
unraid.net/blog/cvdnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000