TrueNAS released 25.10.8 on November 5, fixing exposure of dataset passphrases in internal job details and updating its Linux kernel to 6.12.113. This is a maintenance update to the Goldeye release train.
The passphrase issue, tracked as NAS-144783, arose when an administrator unlocked a passphrase-encrypted dataset through the web interface. The passphrase appeared unredacted in arguments to an internal zfs.dataset.bulk_process job. The update marks those arguments as secret. The notes do not establish an external breach or provide a complete affected-version range for this issue.
A kernel fix with a deployment-specific risk assessment
Among the kernel vulnerabilities addressed is CVE-2026-98432, a use-after-free in IPv4 TCP connection setup. The TrueNAS impact statement identifies 25.10.7 and earlier in the 25.10 train as affected, and 25.10.8 as fixed. FreeBSD-based TrueNAS CORE is unaffected by this Linux issue.
TrueNAS rates its appliance-specific risk Medium, distinguishing it from more severe upstream assessments. Its analysis says the relevant path on a default deployment depends on IPv4 options reaching the appliance, typically requiring an on-path or network-adjacent position. Other described trigger paths do not apply to the default configuration.
The vendor reports no in-the-wild exploitation at the time of its advisory. Its recommended fix is to upgrade and reboot into the patched kernel; keeping management and storage interfaces on trusted, segmented networks remains additional protection.
The release notes say the kernel refresh addresses more than 1,600 upstream CVEs. That aggregate should not be read as a count of equally reachable vulnerabilities on every TrueNAS system.
Prepare for the restart
TrueNAS’s update instructions recommend installing during scheduled maintenance while the system is idle. Save the system configuration with the Export Password Secret Seed option selected and keep that backup secure. The seed is needed to recover encrypted configuration fields. After the restart, verify settings and test the services the appliance provides.
