Unraid OS 7.3.5 Now Available

Unraid OS 7.3.5 is a maintenance release. It updates several base packages to address CVEs, adds Unraid API security hardening, updates the Linux kernel to 6.18.60-Unraid, and adds support for the British Columbia timezone. We recommend upgrading to get these security updates.

Changes vs. Unraid OS 7.3.4

WebGUI / System

• New: Added support for the British Columbia timezone.

Unraid API

• Security: Protected GraphQL operations enforce authorization.
• Security: GraphQL requests have limits on request size and query complexity. Schema metadata (introspection) requests are blocked when Developer Sandbox is disabled. Clients that rely on schema introspection in that mode, or that go over the limits, may need to be adjusted.
• Security: Stored OIDC client secrets are no longer returned in API settings or provider responses. If an update leaves the secret out, the configured secret is kept.
• Fix: Repeated OIDC authorization requests and callbacks are bounded.

Linux Kernel

The Linux kernel is updated to 6.18.60-Unraid.

Base Distro

16 packages updated, including:

• bind 9.20.29 → 9.20.30 (CVE-2026-19630, CVE-2026-94300, CVE-2026-96888, CVE-2026-97313)
• brotli 1.2.0-2 → 1.2.1 (CVE-2026-111497)
• patch 2.8-2 → 2.8.1 (CVE-2026-115207)
• util-linux 2.42.4 → 2.42.4-4 (CVE-2026-78408)
• btrfs-progs 7.1-2 → 7.3
• zfs 2.4.4 (rebuilt for kernel 6.18.60)
• dynamix.unraid.net (Unraid API) 4.37.5-2 → 4.37.11-2

See the full release notes for the complete package list.

Known Issues

No new release-specific known issues are listed. See the Unraid OS 7.3.4 release notes for the previous release's known issues.

Rolling Back

No release-specific rollback limitations are listed.