Path Traversal in UniFi Protect AI Key

Executive Summary

This vulnerability is a Path Traversal issue in UniFi Protect AI Key. It allows a malicious actor with network access to exploit the flaw and retrieve information about files stored on the device under specific conditions.

Useful 0 Not Useful 0

Detection Guidance

Detection of CVE-2026-110457 requires monitoring for path traversal attempts targeting UniFi Protect AI Key. Check network logs for unusual file access patterns or requests containing sequences like '../' or '..\'. Inspect UniFi Protect AI Key device logs for unauthorized file enumeration or access attempts.

Useful 0 Not Useful 0

Impact Analysis

An attacker could access sensitive file information on your UniFi Protect AI Key device, potentially exposing confidential data or system details if they gain network access.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows unauthorized access to file information, which could lead to exposure of sensitive data. This may impact compliance with GDPR by violating data protection principles and HIPAA by compromising protected health information if such data is stored or processed.

Useful 0 Not Useful 0

Mitigation Strategies

Isolate affected UniFi Protect AI Key devices from the network to prevent potential exploitation. Ensure network segmentation and restrict access to trusted users only. Monitor network traffic for unusual file access patterns.

Useful 0 Not Useful 0