ZDI-26-172
HIGH 7.3
Published
Mar 09, 2026
Unraid Authentication Request Path Traversal Authentication Bypass Vulnerability
Unraid
A high-severity authentication bypass vulnerability (CVE-2026-3839) has been discovered in Unraid that allows remote attackers to gain unauthorized access without needing valid credentials. Attackers can exploit this flaw to compromise affected systems and potentially gain administrative control over Unraid installations. Security teams should prioritize patching affected systems immediately and consider implementing network-level restrictions to limit remote access to Unraid services until updates are deployed.