CVE-2026-123033

TrueNAS SCALE versions before 25.10.8 (including earlier release trains) are vulnerable to an authentication bypass in the middlewared HA heartbeat origin check. The ha_permission hook is registered unconditionally without verifying failover licenses or heartbeat interfaces. An unauthenticated at...