Executive brief
Ubiquiti UniFi Play devices, which are used for networked audio distribution and amplification, are vulnerable to a critical security flaw. An attacker with access to the local network can take complete control of these devices by injecting malicious commands. This could lead to unauthorized access to the audio system, disruption of services, or a foothold for further attacks on the corporate network.
Technical details
The vulnerability is classified as a series of Improper Input Validation (CWE-20) issues leading to Command Injection. The flaw exists within the UniFi Play network stack of the PowerAmp and Audio Port devices. An unauthenticated attacker with network access can exploit these vulnerabilities by sending specially crafted input that the system fails to properly sanitize before execution. Successful exploitation allows for arbitrary command execution with high privileges, potentially leading to full system compromise. Patches are available in UniFi Play PowerAmp version 1.0.38 and UniFi Play Audio Port version 1.1.9.
Affected products
- Ubiquiti UniFi Play PowerAmp 1.0.35 and earlier
- Ubiquiti UniFi Play Audio Port 1.0.24 and earlier
Timeline
- 2026-04-13: disclosed
- 2026-04-13: advisory