The vulnerability is an Improper Access Control flaw in the UniFi Protect AI Key. An attacker who can reach the device over the local network can read sensitive data, make unauthorized configuration changes, and cause the device to become unresponsive. These problems compromise confidentiality, integrity, and availability of the camera‑security system.

The flaw affects Ubiquiti Inc’s UniFi Protect AI Key camera‑security device. No specific firmware versions were cited in the advisory, so all firmware running the affected component is potentially vulnerable.

The CVSS score of 8.6 indicates high severity, while the EPSS of <1% suggests a low probability of exploitation today. The vulnerability resides within the device’s network services, so an adversary must first gain network access to the device. Although it is not listed in the CISA KEV catalog, the combination of elevated impact and required local network presence warrants immediate attention.