Unraid OS 7.3.2 Now Available

Unraid 7.3.2 is out now with a critical WebGUI security patch, security updates across dozens of core packages, a kernel upgrade to 6.18.38, Docker VLAN networking fixes, storage and boot-pool corrections, virtualization UI fixes, Unraid API 4.35.1, and several base package updates.

This update is recommended for all users.

Security

This release fixes CVE-2026-3838, a path-traversal command execution vulnerability in the WebGUI's update.php. If you're running 7.3.1 or earlier, update now.

Beyond that, 7.3.2 includes base package security fixes with CVE coverage across multiple components including openssl, nginx, curl, samba, php, openssh, and more. 

WebGUI & System

• New: Added monitor status output for panel indication plugins that use LED and LCD state.
• Shutdown and reboot syslog saving now creates /boot/logs before writing syslog files.
• System Devices controller listings no longer include unrelated devices in affected cases.
• Internal Boot with Flash Licensing better handles transient USB license device resets.

Docker

Docker has been updated to 29.5.3.

A fix ensures Docker VLAN auto-networks can fall back to the configured Docker gateway, so containers keep outbound connectivity in affected setups.

Docker tab load performance has also been improved by keeping synchronous I/O off the render path — a community contribution from TSpader. Thank you!

Storage

Several boot pool and storage fixes in this release:

• Boot pool replacement no longer leaves a stale missing mirror member in affected cases.
• Removing a boot pool device no longer triggers a regression that could fail the operation.
• Formatting a pool device whose name overlaps with a boot device no longer triggers a false-positive invalid-target assertion.
• Dashboard cache pool size and usage reporting is corrected for Btrfs RAID1 pools.

Networking & Hardware

• Avahi/mDNS can start the daemon again after transient network loss.
• Intel GPU PCI speed reporting is corrected.
• Intel iGPU SR-IOV controls are shown only when the supporting plugin is installed.

Virtualization

• VM CPU usage no longer reports high usage caused by unrelated host tasks.
• VM context menu positioning is corrected.
• VM Network Source dropdown entries are sorted and the control is wider for easier scanning.
• Removed an obsolete VM reboot banner message when VM PCI options are enabled.

Linux Kernel

The Linux kernel has been upgraded to 6.18.38-Unraid. This release also sets CONFIG_USB_AUTOSUSPEND_DELAY=-1.

Unraid API

Updated to dynamix.unraid.net 4.35.1.

Base Distro Updates

Added Packages (3)

• libcbor 0.14.0
• libfido2 1.17.0
• libmaxminddb 1.13.3

Updated Packages (73)

Major security-relevant updates include:

• openssl 3.5.6-2 → 3.5.7 — 12 CVEs (CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-45447, and 8 NVD CVEs)
• nginx 1.30.1-1 → 1.30.3-1 — 3 CVEs (CVE-2026-9256, CVE-2026-42055, CVE-2026-48142)
• docker: version 29.5.2 → 29.5.3
• curl 8.20.0 → 8.21.0 — 5 CVEs (CVE-2026-9079, CVE-2026-9080, CVE-2026-9545, CVE-2026-9546, CVE-2026-9547)
• samba 4.22.10-1 → 4.22.10-2 — 6 CVEs (CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480)
• php 8.4.21-1 → 8.4.23-1 — CVE-2026-14355
• dnsmasq 2.92rel2 → 2.93 — CVE-2026-2291
• sqlite 3.53.1 → 3.53.3 — 2 CVEs
• net-tools — CVE-2025-46836

Other notable updates: bash 5.3.015, bind 9.20.24, docker 29.5.3, git 2.55.0, mesa 26.1.4, qemu 10.2.3, zfs 2.4.3, and 50+ additional packages. A full list is available in the release notes.