A malicious actor with network access can exploit an incorrect authorization flaw in the UniFi Network Application to maintain elevated privileges in the controller even after the original access has been revoked. The vulnerability is catalogued as CWE‑863, indicating improper enforcement of authorization controls and potentially allowing an attacker to persist unauthorized rights indefinitely.

Ubiquiti Inc’s UniFi Network Application is affected. No specific vulnerable versions are provided in the advisory, so the risk applies to any deployment of the application until a vendor patch is released.

The CVSS score of 7.5 indicates high severity, but the EPSS score of less than 1% highlights a low likelihood of exploitation. The vulnerability is not listed in CISA KEV. Based on the description, it is inferred that an attacker would need network access that permits interaction with the controller after an initial compromise. In the absence of an official workaround, risk mitigation focuses on restricting the controller’s exposure and applying a future vendor‑issued patch.