A malicious actor who can connect to the network and has low local privileges can exploit an improper access control flaw in UniFi OS Protect. The vulnerability (CWE‑284) allows the attacker to bypass authorization checks within the Protect application, elevating host privileges and potentially allowing the execution of privileged commands or further compromise of the device.

The flaw impacts Ubiquiti Cloud Gateways, Cloud Keys, Dream Machines, Dream Routers, Dream Wall, Enterprise Video Recorders, and Network Video Recorders that run UniFi OS Protect; no specific version information is available, so current releases of these products are potentially affected.

The CVSS score of 7.5 indicates high severity, while the EPSS score of less than 1% signals a very low but non‑zero likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Attackers would need network connectivity to the device and low initial privileges, then exploit the Protect application to gain elevated rights. Despite limited exploitation probability, the high gain justifies immediate mitigation.