CVE-2024-11944: RCE in TrueNAS CORE 13.3-RELEASE

The impact of CVE-2024-11944 is severe. An attacker can leverage this directory traversal vulnerability to execute arbitrary code with root privileges on the affected TrueNAS system. This could lead to complete system compromise, including data exfiltration, data destruction, and the installation of persistent malware. Given the critical role TrueNAS often plays in storing and managing sensitive data, a successful exploitation could have devastating consequences for organizations. The lack of authentication requirement significantly broadens the attack surface, making it accessible to a wide range of attackers.

1. Reserved2024-11-27
2. Published2024-12-30
3. EPSS updated2026-04-02

The primary mitigation for CVE-2024-11944 is to upgrade to a patched version of TrueNAS CORE as soon as it becomes available. Until a patch is applied, consider implementing temporary workarounds to reduce the attack surface. Restricting network access to the TrueNAS system, particularly from untrusted sources, is crucial. Implement strict firewall rules to limit inbound connections. Monitor system logs for any suspicious activity, such as unusual file creations or modifications within the /usr/local/ directory. While a WAF or proxy cannot directly prevent this vulnerability, it can help detect and block malicious requests attempting to exploit it.