Executive brief
Ubiquiti UniFi Play devices, which are used for professional audio distribution and amplification, contain a critical security flaw. An attacker with network access to these devices can bypass security restrictions to write unauthorized files to the system. This could allow them to take full control of the device, potentially leading to service disruptions or unauthorized access to the local network.
Technical details
A path traversal vulnerability (CWE-22) exists in the firmware of UniFi Play PowerAmp and Audio Port devices. The flaw allows a remote, unauthenticated attacker with network access to the device to bypass directory restrictions and write arbitrary files to the underlying filesystem. By writing malicious files to sensitive locations, the attacker can achieve remote code execution (RCE) with the privileges of the affected service. The vulnerability is addressed in UniFi Play PowerAmp version 1.0.38 and UniFi Play Audio Port version 1.1.9.
Affected products
- Ubiquiti UniFi Play PowerAmp 1.0.35 and earlier
- Ubiquiti UniFi Play Audio Port 1.0.24 and earlier
Timeline
- 2026-04-13: disclosed
- 2026-04-13: advisory