Executive brief
Ubiquiti UniFi Play devices, which are used for networked audio streaming and amplification, contain a security flaw that could allow unauthorized individuals to steal WiFi passwords. An attacker with access to the local network could exploit this to gain sensitive credentials, potentially allowing them to access other parts of the wireless network. Users should update their device firmware immediately to prevent unauthorized access to their network credentials.
Technical details
An improper access control vulnerability (CWE-284) exists in the UniFi Play PowerAmp (v1.0.35 and earlier) and UniFi Play Audio Port (v1.0.24 and earlier). The flaw allows a malicious actor with network access to the UniFi Play environment to bypass intended restrictions and extract WiFi credentials in plaintext or a recoverable format. This is a network-based attack that requires no prior authentication or user interaction. The vulnerability has been addressed in UniFi Play PowerAmp version 1.0.38 and UniFi Play Audio Port version 1.1.9.
Affected products
- Ubiquiti UniFi Play PowerAmp 1.0.35 and earlier
- Ubiquiti UniFi Play Audio Port 1.0.24 and earlier
Timeline
- 2026-04-13: disclosed
- 2026-04-13: advisory