Resource Allocation Vulnerability in File Station by QNAP

CVE-2025-54155

What is CVE-2025-54155?

A resource allocation vulnerability has been identified in QNAP's File Station 5, where insufficient limits or throttling can allow an authenticated remote attacker with admin privileges to exploit this flaw. By compromising the allocation of resources, the attacker could disrupt access for other systems, applications, or processes relying on the same resources, presenting significant operational risks. Users are urged to upgrade to version 5.5.6.5018 or later to mitigate these risks.

References