Executive brief
A security vulnerability has been identified in Ubiquiti UniFi OS devices running the UniFi Protect application, which is used for video surveillance management. An authorized user with low-level access could exploit this flaw to gain higher-level administrative control over the device. This could allow an attacker to compromise the security of the surveillance system and the underlying hardware.
Technical details
An improper access control vulnerability (CWE-284) exists in UniFi OS when running the UniFi Protect Application. A remote attacker with low-level authenticated access to the network can exploit this flaw under specific conditions to escalate their privileges to a higher level on the host device. The attack requires high complexity (AC:H) but no user interaction. The vulnerability affects multiple Ubiquiti hardware lines including Dream Machines, Dream Routers, and Network Video Recorders. The issue is resolved in UniFi Protect version 5.1.19 and later.
Affected products
- Ubiquiti Inc Dream Machines < 5.1.19
- Ubiquiti Inc Dream Wall < 5.1.19
- Ubiquiti Inc Dream Routers < 5.1.19
- Ubiquiti Inc Cloud Keys < 5.1.19
- Ubiquiti Inc Network Video Recorders < 5.1.19
- Ubiquiti Inc Enterprise Video Recorders < 5.1.19
- Ubiquiti Inc Cloud Gateways < 5.1.19
Timeline
- 2026-07-02: advisory
- 2026-07-02: disclosed