This vulnerability allows a malicious actor with network access to exploit a flaw in UniFi OS devices, enabling the attacker to read and potentially manipulate files on the underlying host system. By doing so, the attacker can gain access to an underlying system account, exposing the device to full control and further exploitation. The weakness is a classic directory traversal (CWE-22) that bypasses normal filesystem protections.

All Ubiquiti UniFi OS devices listed by the CNA – including UniFi routers, switches, access points, and the UniFi OS Server – are affected. No version information is provided, so any deployed device may be vulnerable until the vendor releases a fix.

The CVSS score of 10 marks this as a critical flaw; however the EPSS score is unavailable, so the current exploitation probability is uncertain but the lack of a KEV listing suggests no discovered public exploits. The attack is likely carried out from a host on the same network or directly connected to the device, with no authentication required, and can be triggered by requests to the device’s management interface.