Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.7

UniFi Protect AI Key may reveal device files

CVE-2026-110457 · published 4 days ago
Summary

If someone can reach the UniFi Protect AI Key on your network, they could trick it into showing the list of files stored on the device. This could expose sensitive information or help an attacker plan further attacks. Protect the device by segmenting it from untrusted networks and applying any available updates or configuration changes recommended by the vendor.

What to do
  • Update ubiquiti inc unifi protect ai key to version 2.2.8 or later.
Affected software
VendorProductAffected versions
ubiquiti inc unifi protect ai key < 2.2.8
Original advisory text
A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device.
A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
3.7 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published14 Oct 2026
Updated15 Oct 2026
First seen14 Oct 2026
Sources
CVE-2026-110457 · NVD
CVE-2026-110457 · MITRE
Track software like this
Free during beta