TrueNAS SCALE middlewared HA heartbeat auth bypass grants admin access and root command execution
Anyone on your local network could take over this storage box.
Summary
An authentication bypass in the HA heartbeat origin check in middlewared, the TrueNAS SCALE middleware, lets an attacker on the same network segment reach the full administrator API without logging in and run commands as root. Versions before 25.10.8 are affected.
Affected when
- Attacker on the same network segment (layer 2)
- Single-node Community Edition installs without HA setup are also affected
What to do
Update to TrueNAS SCALE 25.10.8 or later. The sources do not name fixed versions for the release trains.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen