Executive brief
UniFi Protect AI Key is a network-attached security device used to manage video surveillance and access control systems. An attacker with network access could exploit an access control flaw to escalate privileges on the device, potentially gaining full administrative control and compromising the security infrastructure protecting physical premises.
Technical details
The vulnerability is an improper access control issue in UniFi Protect AI Key that allows a network-accessible attacker to escalate privileges on the device without authentication. The root cause is inadequate authorization checks on privileged operations, allowing an unauthenticated or low-privileged attacker to perform administrative actions. This is a network-reachable vulnerability with no user interaction required. Successful exploitation grants full device control, enabling an attacker to compromise video surveillance, access logs, and potentially the entire physical security posture of the managed premises.
Affected products
- Ubiquiti UniFi Protect AI Key
Timeline
- 2026-08-26: disclosed