The vulnerability is an Improper Access Control flaw that allows a malicious actor who can reach the device on the network to gain unauthorized access to internal resources through the UniFi Protect AI Key. The flaw stems from insufficient verification of user permissions and can lead to reading or manipulating internal data, impacting confidentiality and integrity.

The affected product is Ubiquiti Inc.'s UniFi Protect AI Key. No specific firmware or hardware revisions are listed in the advisory, so all versions in use should be evaluated for the presence of this flaw.

The CVSS score of 5.3 indicates a moderate severity, while the EPSS score of less than 1% shows a very low but non‑zero likelihood of exploitation. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is an attacker who has internal or network‑level access; exploitation requires that the attacker can communicate with the device, after which the access control failure permits further internal resource access.