ZDI-26-171
HIGH 8.8
Published
Mar 09, 2026
Unraid Update Request Path Traversal Remote Code Execution Vulnerability
Unraid
This vulnerability in Unraid (CVE-2026-3838) allows authenticated remote attackers to execute arbitrary code on affected systems, earning a HIGH severity rating of 8.8. While exploitation requires valid authentication credentials, successful attacks could give adversaries complete control over the Unraid installation. Security teams should prioritize patching Unraid systems immediately and review access controls to limit who can authenticate to these systems.