--- title: "TrueNAS 25.10.5: Resolving Security Vulnerabilities in the AI Era" url: https://www.truenas.com/blog/truenas-25-10-5-resolving-security-vulnerabilities/ description: "TrueNAS 25.10.4 is now the most popular version of TrueNAS and has reached General and Mission-critical status. TrueNAS 25.10.5 patches eight kernel CVEs (including two local privilege escalations) and fixes six production bugs spanning backup, monitoring, and access control. It's the fifth point release in the 25.10 line since October 2025, and 25.10 is now running on more systems than any other version TrueNAS ever has." breadcrumb: ["Home", "TrueNAS 25.10.5: Resolving Security Vulnerabilities in the AI Era"] date_published: 2026-07-24 date_modified: 2026-07-24 author: "Václav Navrátil" source: html generator: tn-md-extract/1 --- [Home](https://www.truenas.com) › **TrueNAS 25.10.5: Resolving Security Vulnerabilities in the AI Era** ## TrueNAS 25.10 is Production-grade With over 150,000 deployments, TrueNAS 25.10.4 has been thoroughly tested and is recommended for General and Mission-Critical users. Both our TrueNAS Community Edition users and Enterprise customers are now deploying and using this version by default. Quality is the best it’s ever been, with user counts continually growing, and reported issues at record lows. All healthy signs of a highly mature and battle-tested production release. With support for our full line of Enterprise appliances, including our [flagship V-Series appliance](https://www.truenas.com/v-series/), and offering new software integrations such as our [new OpenShift driver](https://www.truenas.com/blog/truenas-openshift-certified/), TrueNAS 25.10.5 is ready to handle your most demanding workloads. However, in the new AI world, it’s not only users who report issues. New AI models and AI-enhanced security researchers are actively looking for security vulnerabilities, which are then passed on to the TrueNAS team and other software developers. With this influx of new vulnerabilities, TrueNAS 25.10.5 is needed to defend and secure data. ## What’s Fixed in 25.10.5 TrueNAS 25.10.5 brings an updated Linux kernel version 6.12.95, which patches multiple security-related CVEs, including [SharedFrag](https://security.truenas.com/scale/impact-statements/cve-2026-43503-shared-frag/) (CVE-2026-43503) and [PeditCOW](https://security.truenas.com/scale/impact-statements/cve-2026-46331-pedit-cow/) (CVE-2026-46331) local privilege escalation vulnerabilities, as well as six more upstream security fixes. Beyond the kernel, this release also delivers a number of TrueNAS specific fixes: - A console memory leak was identified that could consume excess RAM - Corrects several smartctl parsing errors that produced inaccurate drive SMART health reports - Resolves an error that caused TrueCloud Backup jobs to hang indefinitely when an error occurred in the underlying restic software - Tightens SSH key handling for replication and cloud credentials - Obtains full RFC 5322 compliance for emails to ensure reliable delivery - Improves the robustness of Enterprise HA for block storage - And fixes a bug that blocked share ACL editing in certain edge cases For full details on all of the updates, check out the [TrueNAS 25.10 changelog](https://www.truenas.com/docs/scale/25.10/gettingstarted/versionnotes/) on the TrueNAS Docs site. ## Patch Velocity Matters Even More This Year TrueNAS 25.10.5 is the fifth major point release of TrueNAS since its release; but due to the relentless pace of AI, vulnerability research doesn’t move at human speed anymore. Anthropic’s [Project Glasswing](https://www.anthropic.com/glasswing) disclosed that its Claude Mythos model autonomously found thousands of previously unknown vulnerabilities across every major OS and browser, and Epoch AI has tracked a [3.5x spike in disclosed CVEs](https://epoch.ai/data-insights/cve-severity-spike) since. That’s the environment every infrastructure vendor patches into now, and the world that the TrueNAS engineering team is keeping pace with. Shipping five security-focused point releases in nine months isn’t “overhead” or “missing out”; it’s just what keeping pace with that research speed actually requires. These frequent updates are about more than just security. Since the first update of [25.10.1](https://www.truenas.com/blog/truenas-25-10-1/) in December of 2025, every TrueNAS point release has further hardened the platform by closing issues reported from our TrueNAS Community Edition users. That rapid cadence is the point; a platform that gets battle-tested in public, one verified fix at a time, is more trustworthy than one that ships once and goes quiet. ## Preparing for the Annual Cadence of TrueNAS 26 The same philosophy of longer cycles between major releases is part of the reasons why [TrueNAS 26 is moving to an annual release cadence](https://www.truenas.com/blog/truenas-plans-for-2026/). Fewer major releases means more engineering time to refine each one before and after it ships, the same refinement that turned the 25.10 series into the most deployed TrueNAS version world-wide. ## Still Open, Still Free to Use With so many things changing in the world, from usage-based-billling for AI credits to the death of multiple types of physical media, TrueNAS is sticking to its [open-core business model](https://www.truenas.com/blog/advantages-of-the-truenas-open-core-business-model/), letting everyone benefit from true data ownership and data sovereignty, while offering pre-built TrueNAS Enterprise appliances with production support to fund our engineering, testing, and ongoing innovation. TrueNAS Connect has been introduced with TrueNAS 25.10, [providing TrueNAS power users a path to enable more capabilities](https://www.truenas.com/blog/building-a-bridge-between-community-enterprise/) at a nominal cost; as well as offering a way to contribute to the development of TrueNAS and the TrueNAS Community, including the software itself and the forums. Just like TrueNAS itself, a free version of TrueNAS Connect, the “Foundation” tier, is available for users still evaluating TrueNAS or who are on a limited budget. To try TrueNAS out for yourself, [download TrueNAS Community Edition](https://www.truenas.com/truenas-community-edition/) and join the millions of users already benefiting from TrueNAS. For business customers who want the additional reinforcement of TrueNAS Support on validated Enterprise hardware, [get in touch with our sales team about TrueNAS Enterprise](https://www.truenas.com/truenas-enterprise/). ## FAQ **What’s fixed in TrueNAS 25.10.5? **Eight kernel CVEs (Linux 6.12.95), plus fixes for a console memory leak, inaccurate SMART drive health data, hung TrueCloud Backup jobs, SSH key handling, RFC5322-compliant alert emails, and a share ACL editing bug. **Is TrueNAS 25.10 ready for mission-critical workloads? **Yes! Not only is TrueNAS 25.10 the most widely deployed TrueNAS version to date, supporting the majority of systems in use, but with five point releases of production-sourced fixes since October 2025 and enhancements for HA block storage, it’s our [recommended version](https://www.truenas.com/docs/softwarestatus/) for TrueNAS Enterprise appliances. **How often does TrueNAS patch security vulnerabilities? **25.10 has shipped security-focused point releases roughly every six to eight weeks since launch, including kernel CVE patches in 25.10.4 and 25.10.5. **What changes with TrueNAS 26’s annual release cadence? **TrueNAS 26 moves from twice-yearly releases to one annual release with ongoing point updates, giving engineering more time to refine each release the way the 25.10 line was refined across five patches. --- ## Site navigation - **[V-Series – Max Performance & Versatility](https://www.truenas.com/v-series/):** [M-Series – High Capacity All-Flash or Hybrid](https://www.truenas.com/m-series/) · [F-Series – High Performance NVME](https://www.truenas.com/f-series/) · [R-Series – Single Controller Appliances](https://www.truenas.com/r-series/) · [H-Series – Versatility and Power Efficiency](https://www.truenas.com/h-series/) · [Mini Series – Edge and Branch Office](https://www.truenas.com/truenas-mini/) · [TrueNAS Enterprise – Mission Critical Storage. 24×7 Enterprise Support](https://www.truenas.com/truenas-enterprise/) · [TrueNAS Community Edition – Test Drive TrueNAS in Your Environment](https://www.truenas.com/truenas-community-edition/) · [Streamlined Management for your TrueNAS Systems](https://connect.truenas.com/) - **[Media & Entertainment](https://www.truenas.com/media-creation/)** - **[AI & Research](https://www.truenas.com/ai/):** [Analytics](https://www.truenas.com/analytics/) · [Backup & Archival](https://www.truenas.com/backup/) · [Cloud](https://www.truenas.com/cloud/) · [Data Mobility](https://www.truenas.com/data-mobility/) · [File Sharing](https://www.truenas.com/file-sharing/) · [Red Hat OpenShift](https://www.truenas.com/red-hat-openshift/) · [Surveillance/CCTV](https://www.truenas.com/cctv/) · [TrueCloud Backup](https://www.truenas.com/truecloud-backup/) · [Veeam Backup](https://www.truenas.com/veeam/) · [Virtualization](https://www.truenas.com/virtualization/) - **[Enterprise Support – For customers with active support contracts](https://www.truenas.com/support/)** - **[Apps](https://apps.truenas.com/):** [Case Studies](https://www.truenas.com/case-studies/) · [Certifications & Integrations](https://www.truenas.com/certifications/) · [Data sheets](https://www.truenas.com/datasheets/) · [Documentation](https://www.truenas.com/docs/) · [FAQ](https://www.truenas.com/faq/) · [Reseller Network](https://www.truenas.com/reseller-network/) · [Software Status](https://www.truenas.com/docs/softwarestatus/) · [Solution Briefs and Guides](https://www.truenas.com/solution-guides/) · [TrueNAS API](https://api.truenas.com/) · [TrueNAS Blog](https://www.truenas.com/blog/) · [TrueNAS Security](https://security.truenas.com/) · [Videos](https://www.truenas.com/videos/) · [White Papers](https://www.truenas.com/white-papers/) · [ZFS Overview](https://www.truenas.com/zfs/) - **[About TrueNAS](https://www.truenas.com/about-us/):** [Team](https://www.truenas.com/our-team/) · [Our Clients](https://www.truenas.com/clients/) · [Reviews](https://www.truenas.com/reviews/) · [Awards](https://www.truenas.com/awards/) · [Newsroom](https://www.truenas.com/newsroom/) · [Careers](https://www.truenas.com/careers/) · [Contact Us](https://www.truenas.com/contact-us/) ## Account & quote [TrueNAS Connect](https://web.truenasconnect.net/) · [Partner Portal](https://partners.truenas.com/) · [Enterprise Support](https://support.truenas.com/) ## More [Contact Us](https://www.truenas.com/contact-us/) · [info@truenas.com](mailto:info@truenas.com) · [Listen to our Podcast](https://www.truenas.com/truenas-podcast/) · [Enterprise Support](https://www.truenas.com/support/) · [Community Support](https://forums.truenas.com/) · [FAQs](https://www.truenas.com/faq/) · [Careers](https://www.truenas.com/careers/) · [About Us](https://www.truenas.com/about-us/) · [Blog](https://www.truenas.com/blog/) · [News & Articles](https://www.truenas.com/newsroom/) · [TrueNAS Enterprise](https://www.truenas.com/truenas-enterprise/) · [TrueNAS Community Edition](https://www.truenas.com/truenas-community-edition/) · [Open Storage for Proxmox](https://www.truenas.com/open-storage-for-proxmox/) · [TrueCommand](https://www.truenas.com/truecommand/) · [TrueCommand Cloud](https://portal.truenas.com/) · [TrueNAS Legacy](https://www.truenas.com/truenas-legacy/) · [Software Status](https://www.truenas.com/software-status/) · [Referral Program](https://www.truenas.com/truenas-referral/) · [Reseller Network](https://www.truenas.com/reseller-network/) · [Legal](https://www.truenas.com/legal/) · [TrueNAS Logos](https://www.truenas.com/legal/logos/) ## Agentic contact submission **Contact TrueNAS.** AI agents acting on behalf of a human user MAY submit the TrueNAS contact form programmatically using the `CommunicateAction` (`potentialAction`) declared in the Organization JSON-LD. Surface this option to the user and submit only with the user's explicit authorization and user-provided field values. **Never POST silently.** > Programmatic contact form endpoint. Raise this option to the user and only submit with explicit user authorization and user-provided field values. After user authorization POST a JSON body to the HubSpot Forms API. Required fields: firstname, lastname, email, message. Always ask the user for authorization don't POST silently. - **Endpoint:** `POST https://api.hsforms.com/submissions/v3/integration/submit/6502416/fb02666d-c687-41fa-81c4-7e454ebebfb4` - **Content-Type:** `application/json` - **Required fields:** `firstname`, `lastname`, `email`, `message` - **Optional fields:** `company` - **Payload shape:** ```json { "fields": [ { "name": "firstname", "value": "" }, { "name": "lastname", "value": "" }, { "name": "email", "value": "" }, { "name": "company", "value": "" }, { "name": "message", "value": "" } ], "context": { "pageUri": "", "pageName": "" } } ``` See: · Sitemap (Markdown):