Unraid OS 7.4.0 Now Available

Unraid OS 7.4.0 is now available as the latest stable release. It adds multiple custom networks and memory limits for Docker containers, Mover progress tracking, improved file operations, a shared task tray, and new boot-device backup and power-button options.

This release also includes WebGUI and Unraid API security fixes, updates the Linux kernel to 6.18.60-Unraid, and updates base packages to address reported CVEs.

Highlights

• Multiple Docker networks: Container templates can attach to more than one custom network. Those attachments stay in place when a container is updated or recreated.
• Docker memory limits: Docker Add/Edit forms include a Memory limit field in Advanced View.
• Mover progress: Mover now tracks progress and status, and it preserves hard links while moving files.
• Shared task tray: Manage background operations from one task tray, with live or completed output available from any browser tab.
• Boot-device backups: Download a backup to your computer or save it to the server, with a choice of compression and progress reporting.
• Physical power button: Choose Shut down, Reboot, or Do nothing under Settings → Power Settings → Power Button → Physical power button.

Changes vs. Unraid OS 7.3.4

Security

• The root-password setup flow shows password setup only when the root account is unconfigured.
• OpenTerminal validates request inputs before use.
• WebGUI pages show values supplied at runtime as plain text instead of interpreting them as markup. This covers the Docker, File Manager, Plugin Manager, wireless, UPS, VM console, and logging pages.
• Anonymous diagnostics mask network addresses and user-controlled identifiers.
• Notification agents that connect to public APIs now verify TLS certificates instead of skipping verification.

Containers / Docker

• New: Docker container templates support multiple custom networks. Those network attachments are kept when containers are updated or recreated.
• New: Docker Add/Edit forms include a Memory limit field in Advanced View and a live icon preview next to the Icon URL field.
• Improvement: Docker registry update checks support OCI image manifests and indexes, and they identify the Unraid client.
• Fix: Docker icon handling no longer deletes the shared default icon or keeps retrying a fallback image that isn't available.
• Fix: Orphan image rows show the Created date in the correct column.

Storage

• New: Mover progress and status tracking is available (finally!).
• Improvement: Mover preserves hard links while moving files.
• Improvement: File Manager keeps exclusive shares under /mnt/user and handles their paths safely during copy and move. This fixes moves across shares and pools that could lose source files.
• Improvement: Pressing Enter after typing a valid encrypted-array passphrase starts the array.
• Fix: A stopped array no longer shows 100% utilization, and mounted boot partitions keep their used/free statistics.

WebGUI / System

• New: Added support for the British Columbia timezone.
• New: Background operations can be managed from a shared task tray, with live or completed output available from any browser tab.
• New: Boot-device backups can be downloaded to your computer or saved to the server, with a choice of compression and progress reporting.
• New: Configure the physical power button under Settings → Power Settings → Power Button → Physical power button. The options are Shut down, Reboot, and Do nothing.
• Improvement: Plugin installation progress shows up as it arrives, and slow plugin update checks no longer hold up the Installed Plugins page.
• Improvement: Plugins with updates available move to the top of the list as checks finish. Validation failures show their status and the reason.
• Fix: Plugin Manager treats broken plugin links as not installed. Cleanup hooks also run correctly when error messages contain shell characters.
• Fix: Unraid API Status no longer says the API isn't running when the page first loads.
• Fix: Power Options no longer shows the virtualization warning on bare-metal systems, and it keeps the Power Button tab when Dynamix System Buttons is installed.

Virtualization

• Fix: VM startup no longer logs a PHP deprecation warning when the QEMU location lookup returns no output.

Unraid API

• Security: Protected GraphQL operations enforce authorization.
• Security: GraphQL requests have limits on request size and query complexity. Schema metadata (introspection) requests are blocked when Developer Sandbox is disabled. Clients that rely on schema introspection in that mode, or that go over the limits, may need to be adjusted.
• Security: Stored OIDC client secrets are no longer returned in API settings or provider responses. If an update leaves the secret out, the configured secret is kept.
• Fix: Repeated OIDC authorization requests and callbacks are bounded.

Linux Kernel

The Linux kernel is updated to 6.18.60-Unraid.

Base Distro

16 packages updated, including:

• bind 9.20.29 → 9.20.30 (CVE-2026-19630, CVE-2026-94300, CVE-2026-96888, CVE-2026-97313)
• brotli 1.2.0-2 → 1.2.1 (CVE-2026-111497)
• patch 2.8-2 → 2.8.1 (CVE-2026-115207)
• util-linux 2.42.4 → 2.42.4-4 (CVE-2026-78408)
• btrfs-progs 7.1-2 → 7.3
• zfs 2.4.4 (rebuilt for kernel 6.18.60)
• dynamix.unraid.net (Unraid API) 4.37.5-2 → 4.37.11-2

See the full release notes for the complete package list.

Community Contributions

Thanks to the community contributors whose changes are included in the 7.4 series:

• junkerderprovinz: live plugin-install progress updates
• Mainfrezzer: Docker registry client identification and OCI image support
• Joly0: corrected Docker icon fallback behavior
• chodeus: preserved the shared Docker icon and corrected orphan-image date display
• Sacred-Shadow: removed TLS verification bypasses from public notification agents

Known Issues

No new release-specific known issues are listed. For known issues carried forward, see the Unraid OS 7.3.4 release notes.

Rolling Back

No new release-specific rollback warnings are documented. For earlier rollback guidance, see the Unraid OS 7.3.4 release notes.